Site Information
WordPress Version: 7.0 ✓
Theme: bizora (used by 50 domains)
Last Checked: 2026-07-02 09:36:03
HTTPS: ✅ Yes
Plugins (28)
| Plugin | Used By |
|---|---|
| bluehost-wordpress-plugin | 193,298 |
| contact-form-7 | 1,769,647 |
| creative-mail-by-constant-contact | 69,738 |
| custom-facebook-feed | 41,986 |
| essential-blocks | 24,264 |
| fluentform | 60,447 |
| google-site-kit | 232,357 |
| gtranslate | 126,631 |
| gutenkit-blocks-addon | 4,064 |
| hydra-booking | 193 |
| instagram-feed | 227,261 |
| jetpack | 460,725 |
| king-addons | 847 |
| master-addons | 3,583 |
| popup-builder-block | 2,756 |
| reviews-feed | 20,496 |
| supportcandy | 1,343 |
| the-post-grid | 14,895 |
| ultimate-addons-for-contact-form-7 | 10,255 |
| ultimate-post | 6,582 |
| uncanny-automator | 466 |
| visitors-traffic-real-time-statistics | 5,016 |
| widget-google-reviews | 36,232 |
| woocommerce-google-adwords-conversion-tracking-tag | 10,163 |
| wp-consent-api | 53,206 |
| wp-social | 5,152 |
| wp-stats-manager | 4,317 |
| wp-ultimate-review | 3,670 |
Security Headers
D
Grade D
4 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress site? Contact us for a professional security audit.