WonderCMS is the smallest CMS in the world. It enables you to create a SEO optimized website in seconds. No configuration, lightweight, fast and secure. Powered by less than 900 lines of code.
Version: 2.7.0WonderCMS is the smallest CMS in the world (flat file). Simple and straighforward. Completely free and easy to install by simply unzipping and uploading to your server.
Operating System: Windows
Founded in 2008 and open sourced in 2010.
- GDPR ready
- https support out of the box
- very small in size (14KB zip) and works with only 5 files
- one click update
- simple click and edit functionality
- no configuration required, unzip and upload
- runs only on a couple hundred lines of code
- simplified code
- custom login URL
- custom homepage
- rebuilt mostly from scratch + MIT license
- better password protection
- no known vulnerabilities
- highlighted current page
- mobile responsive, easy to theme, 404 pages, clean URLs
- page deleting easier than ever
- better SEO support (title, keywords and description for each page) (
- optional) functions.php file includes itself when you create it
- made with PHP, jQuery, HTML, CSS and a flat JSON database
- works on Apache, NGINX and IIS
- WYSIWYG editor
- Summernote available as a standalone plugin
Requirements: PHP 5.5 or above and support for .htaccess. For NGINX, editing the server config is necessary.
Version 2.7.0: - Random password generator for first time installs. - 'Get external file' function improved. - Minimum password length changed to 8 characters. - Minor code improvements and optimizations. - Fixed a possible bypass (on top of an already patched) bug.
Version 2.6.0: - added functionality for naming page before creating it - minor text and settings panel visual changes - code optimisation/cleanup - updated autosize library version - increased randomness of backup file names
Version 2.5.2: - fixed session fixation vulnerability - fixed mixed content warning for NGINX servers - improved main URL function and added multiple string case checks for the HTTPS protocol and port forwarding
Version 2.4.2: Fixed bug with 'double update' notification (2.4.2 patch). The double notification bug will be displayed one last time after updating.
Version 2.4.0: - Removed old version update support compatibility. - A better definition of public/private functions. - Corrected code logic in theme/plugin installer with an array check. - Added hash_equals checks to prevent CSRF timing attacks. - Added link to WonderCMS homepage in the Settings panel.
Version 2.3.2: - two additional ISSET checks to prevent PHP notices - changed HTTP 1.0 headers to HTTP 1.1 - updated links to themes and plugins in the Settings panel - removed converted case for page titles - core code in WonderCMS prettified - providing a better level of readability - minor text changes
Version 2.3.1: - one click backup - re-designed settings panel - theme installer + updater + remover - plugin installer + updater + remover - file uploader + remover - tab/indentation support - added two additional checks if the request for token is set - double space removal / converted to tabs
Version 2.2.0: - easy menu/page re-ordering - additional verification tokens added to prevent CSRF attacks - minor bug fixes - faster and more secure
Version 2.0.2: - additional hook added: page - fixed bug in function name that caused errors for some users - added default font size for settings panel - removed unnecessary spaces and semicolons in settings CSS + CSS bug fixes