Simple website builder, smallest flat file CMS for building simple websites and blogs. Open source, secure, light, simple and fast. Runs only on 5 files
Version: 3.1.1WonderCMS is a simple website builder and the CMS in the world (flat file). Simple and straighforward. Completely free and easy to install by simply unzipping and uploading to your server.
Operating System: Windows
Founded in 2008 and open sourced in 2010.
- GDPR ready
- https support out of the box
- very small in size (14KB zip) and works with only 5 files
- one click update
- simple click and edit functionality
- no configuration required, unzip and upload
- runs only on a couple hundred lines of code
- simplified code
- custom login URL
- custom homepage
- rebuilt mostly from scratch + MIT license
- better password protection
- no known vulnerabilities
- highlighted current page
- mobile responsive, easy to theme, 404 pages, clean URLs
- page deleting easier than ever
- better SEO support (title, keywords and description for each page) (
- optional) functions.php file includes itself when you create it
- made with PHP, jQuery, HTML, CSS and a flat JSON database
- works on Apache, NGINX and IIS
- WYSIWYG editor
- Summernote available as a standalone plugin
Requirements: PHP 5.5 or above and support for .htaccess. For NGINX, editing the server config is necessary
Version 3.1.1: - Fixed vulnerabilities. - Upgraded WonderCMS updating mechanism to prevent database corruption. - Improved file upload allowed extensions list. - Other minor improvements. - New theme - Watercolor - Cache plugin - caches all theme/plugin images. - All translation plugins have been updated.
Version 3.1.0: - Faster WonderCMS - settings are now completely independent and detached of jQuery and Bootstrap. - Translations: German, Russian, Dutch, French, Polish Slovenian. - Read full changelog: https://wondercms.com/whatsnew.
Version 2.7.0: - Random password generator for first time installs. - 'Get external file' function improved. - Minimum password length changed to 8 characters. - Minor code improvements and optimizations. - Fixed a possible bypass (on top of an already patched) bug.
Version 2.6.0: - added functionality for naming page before creating it - minor text and settings panel visual changes - code optimisation/cleanup - updated autosize library version - increased randomness of backup file names
Version 2.5.2: - fixed session fixation vulnerability - fixed mixed content warning for NGINX servers - improved main URL function and added multiple string case checks for the HTTPS protocol and port forwarding
Version 2.4.2: Fixed bug with 'double update' notification (2.4.2 patch). The double notification bug will be displayed one last time after updating.
Version 2.4.0: - Removed old version update support compatibility. - A better definition of public/private functions. - Corrected code logic in theme/plugin installer with an array check. - Added hash_equals checks to prevent CSRF timing attacks. - Added link to WonderCMS homepage in the Settings panel.
Version 2.3.2: - two additional ISSET checks to prevent PHP notices - changed HTTP 1.0 headers to HTTP 1.1 - updated links to themes and plugins in the Settings panel - removed converted case for page titles - core code in WonderCMS prettified - providing a better level of readability - minor text changes
Version 2.3.1: - one click backup - re-designed settings panel - theme installer + updater + remover - plugin installer + updater + remover - file uploader + remover - tab/indentation support - added two additional checks if the request for token is set - double space removal / converted to tabs