During February 2011 we performed a survey of technologies in use by the Alexa Top 1 Million web sites. Including Content Management Systems, Web Servers, Server Side Scripts, Client Side Scripts, Web Frameworks and more. The aim of the survey is to get an accurate picture of web application and web server popularity. We hope this will help to highlight the importance of understanding the technology used, performing ongoing patch management and having a vulnerability assessment program when it comes to securing your web site.

See below for a summary of the Content Management System Popularity (CMS), a summary of the Web Server Popularity has also been published.

Click here for the full report (PDF)
Results indicate WordPress is well ahead in the CMS stakes, Open Source Systems are quite popular with dotNetNuke being the only .NET based system to make an appearance in the Top 8. See the full report for detailed breakdown of all the major Content Management Systems. While vBulletin and phpBB are not traditional CMS systems they are the application providing the core content on these sites so have been included.
The breakdown of WordPress versions shows that there are thousands still running on old code and that have published critical security vulnerabilities.