Where it fits
Organisations whose publishing needs fit a maintained, documented WordPress stack.
Trade-offs and limitations
Page builders, commercial plugins and hosting services can introduce lock-in despite the open core.
Deployment and technology
PHP · MySQL/MariaDB. Self-hosting requires a supported deployment, capacity planning and a named maintainer. Consult the official installation guide for the current version.
Portability and integration
| API | REST API |
|---|---|
| Authentication | Core accounts; SSO generally needs a reviewed integration |
| Data export | WXR content export plus database and uploaded files |
Migration considerations
Inventory shortcodes, forms, custom post types and plugin data; test a restore outside the current host.
Security and ongoing costs
Budget for infrastructure, implementation, monitoring, patching, backups, restore tests and user support. Check the supported release and current advisories with the project. An open licence is not a security guarantee.
Freedom score and exit difficulty
A complete, evidence-backed assessment of all 15 criteria is required before publishing a score. Exit difficulty depends on your customisations, data model, integrations and operating documentation. This profile does not claim a hands-on benchmark or a complete security assessment.
Primary sources
Profile reviewed 2026-09-12. Verify the exact release, edition and extensions before implementation.