Open-Source CMS · WonderCMS

wondercms

WonderCMS is a lightweight, flat-file PHP CMS designed for simple websites. It requires no database or configuration—just unzip and upload five files to get started.

Talk to DEV.co Discuss Implementation

Source: GitHub — github.com/WonderCMS/wondercms

733

GitHub stars

165

Forks

PHP

Primary language

MIT

License (OSI-approved)

Key facts

Objective fields from the source. Values we can't verify are shown as “Unknown” rather than guessed.

Field	Value
Repository	WonderCMS/wondercms
Owner	WonderCMS
Primary language	PHP
License	MIT — OSI-approved
Stars	733
Forks	165
Open issues	1
Latest release	3.6.0 (2025-12-31)
Last updated	2026-01-01
Source	https://github.com/WonderCMS/wondercms

What wondercms is

PHP 7.4+ flat-file CMS using JSON for data storage. Single-step deployment with no external dependencies beyond core PHP extensions (cURL, mbstring, Zip). Supports Apache, NGINX, IIS, and Caddy with SRI-protected inline admin libraries.

Quickstart

Get the wondercms source

Clone the repository and explore it locally.

terminalbash

1git clone https://github.com/WonderCMS/wondercms.git2cd wondercms3# follow the project's README for install & configuration

Need it deployed, integrated, or customized instead? DEV.co ships production installs.

Best use cases

Small business or portfolio sites

Fast deployment for companies needing simple content pages without database overhead. Minimal hosting requirements work on shared hosting.

Landing pages and marketing microsites

Quick launch with built-in SEO support (titles, keywords, descriptions per page) and theme/plugin installer for rapid customization.

Fully managed migrations

Simple copy/paste deployment model—no database migrations, configuration, or specialized tools needed when moving to new hosts.

Implementation considerations

Requires PHP 7.4+, cURL, mbstring, and Zip extensions; mod_rewrite for Apache or equivalent URL rewriting on other servers.
NGINX and IIS require one additional manual configuration step beyond Apache defaults; document this before deployment.
Admin libraries (wcms-admin.min.js, autosize, taboverride) loaded only when logged in via CDN with SRI tags—verify CDN accessibility in target environment.
JSON database file must have write permissions; ensure correct filesystem ownership and backup strategy before production use.
Custom login URL is security-critical (acts as private username); establish naming and documentation guidelines for teams.

When to avoid it — and what to weigh

High-scale multi-user content workflows — JSON-based storage is not designed for concurrent editing, complex permission models, or versioning across teams.
Complex e-commerce or SaaS requirements — No built-in support for transactions, user accounts at scale, or relational data. Flat files lack the structure for sophisticated business logic.
Heavy plugin/theme ecosystem needs — Community ecosystem is small compared to WordPress or Drupal. Custom functionality may require direct PHP modification or custom plugin development.
Strict compliance or audit trails — Flat-file model offers limited access control, logging, and audit capabilities for regulated industries.

License & commercial use

MIT License—permissive open-source license allowing commercial use, modification, and distribution with attribution.

MIT License permits commercial use, including proprietary derivatives and resale. No restrictions on using WonderCMS for client projects or SaaS offerings. No license fees or vendor lock-in.

DEV.co evaluation signals

Editorial assessment — not user reviews. Directional, with an explicit confidence level.

Signal	Assessment
Maintenance	Active
Documentation	Adequate
License clarity	Clear
Deployment complexity	Low
DEV.co fit	Good
Assessment confidence	High

Security considerations

Project reports no known vulnerabilities and includes password hashing (PHP password_hash), CSRF tokens with timing-attack mitigation (hash_equals), SRI for library integrity, and 404-response on login URL. Privacy-oriented (no cookies/tracking by default). Recommend: change default login URL, enforce strong admin password, configure HTTPS, restrict file permissions on database.js. Flat-file model has no built-in role-based access control; admin access is all-or-nothing.

Alternatives to consider

WordPress with minimal plugins

Larger ecosystem and community support, but adds database and complexity; overkill for simple sites. More maintenance surface.

Static site generators (Hugo, Jekyll, 11ty)

Better for content versioning and CI/CD workflows, but require build step and technical CLI knowledge. No live editing UI.

Statamic or Craft CMS

Modern flat-file or hybrid CMSes with richer admin UI and plugin ecosystems, but steeper learning curve and hosting requirements.

Software development agency

Build on wondercms with DEV.co software developers

Download WonderCMS, unzip, upload. No setup, no configuration—start managing content instantly.

Talk to DEV.co

Related open-source tools

Surfaced by semantic similarity across the DEV.co open-source index.

forkcms cms concretecms

Related on DEV.co

Explore the category and the services that help you build with it.

Open-Source CMS Web App Development Custom Software Talk to DEV.co

wondercms FAQ

Can multiple people edit content simultaneously?

Not reliably. JSON flat-file storage lacks concurrent-edit safeguards. Lock mechanism not mentioned. Best for single-admin or scheduled editing windows.

How is content backed up and restored?

1-click backup feature mentioned in README but implementation details not provided. Presumably archives JSON database and theme/plugin files. Verify restore procedure before production use.

What hosting do I need?

Any host with PHP 7.4+, cURL, mbstring, Zip extensions, and mod_rewrite (Apache) or equivalent URL rewriting. Works on shared hosting; no database required.

Can I extend WonderCMS with custom functionality?

Yes, via hooks/listeners plugin system and optional functions.php file in active theme folder. Direct PHP modification also possible but not recommended for maintainability.

Work with a software development agency

Need help beyond evaluating wondercms? DEV.co is a software development agency offering software development services and web development for teams of every size. Our software developers and web developers build custom software, web applications, APIs, and open-source cms integrations — and maintain them long-term.

Deploy your site in minutes

Download WonderCMS, unzip, upload. No setup, no configuration—start managing content instantly.

Talk to DEV.co Schedule a Consultation