Download websites that use X-Cart

About X-Cart

Self hosted commerce is a decision about control, and X-Cart has been offering that trade since 2001. A merchant running it holds the PHP source, hosts the store wherever they choose, and takes on the patching, the upgrades and the compliance scope that a hosted checkout would otherwise absorb on their behalf. Nobody arrives at that arrangement casually. As of October 2026 we detect X-Cart on 130 sites.

A store on licensed, self hosted software is a particular kind of buyer. Custom integration work is usually already happening there, because the reason to keep the code in house is normally an inventory system, a pricing rule, a catalogue structure or a back office process that a template store could not accommodate. Budget therefore sits with developers and systems integrators rather than with a marketing team picking apps out of a directory. Vendors selling into commerce stacks read the same signal in reverse, since a merchant already paying for hosting, maintenance and development is a merchant who buys components instead of subscribing to one product that bundles everything.

X-Cart Holdings LLC is the publisher our record names and Proprietary the licence it records, and here licensing matters more than it usually does. The code arrives in a form the buyer can read and modify, and a store carries on answering long after the paperwork behind it has lapsed, so the detected population is not the same thing as the vendor's active customer base. Some of these stores are supported and current. Others are years of accumulated modification that no upgrade path was ever going to survive, and the operators generally know it.

Version data is where we have to be careful about what we claim. Across the whole detected population our fingerprint resolves a single version value, 5, which is a statement about the granularity of the detection rather than about the uniformity of the installed base. Major releases of this platform differ enough that treating them as interchangeable would be wrong, and we do not pretend to separate minor releases or patch levels from a single page load. Anyone whose question is specifically about upgrade lag should treat our version column as a coarse bucket and plan on confirming the detail store by store.

The question a downloadable list answers here is a population question. Checking one domain tells you whether that merchant runs X-Cart. What it cannot tell you is how many stores in a country, a top level domain or a product vertical sit on self hosted Ecommerce software and are therefore reachable with a migration offer, an integration, a payment gateway or an outsourced maintenance contract. Our detection is inferential, built from markup patterns, asset paths and cart behaviour that a public page exposes, and a store that has been fully reskinned or fronted by a cache can escape it entirely. The figure is a floor, and for segment sizing a consistent floor measured the same way across every platform we track is more useful than a confident estimate nobody can verify.