WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Domain Details for w*n*w*r*h*o*f*l*b.org

Site Information

WordPress Version: 6.9.4 VULNERABLE

Theme: astra (used by 414,121 domains)

Last Checked: 2026-06-30 22:36:29

HTTPS: Yes

Plugins (11)

Plugin Used By
astra-addon 93,792
convertpro 2,809
convertpro-addon 28
elementor 1,770,693
elementor-pro 1,052,481
events-manager 16,803
gravityforms 257,437
header-footer-elementor 206,849
ultimate-elementor 70,783
w3-total-cache 39,206
wp-fullcalendar 1,904

Security Headers

F
Grade F

5 missing headers

Missing headers:

  • Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • X-Content-Type-Options — Prevents MIME sniffing ?
  • X-Frame-Options — Prevents clickjacking ?
  • Permissions-Policy — Limits browser features ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • Vulnerable WordPress Version (6.9.4) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress site? Contact us for a professional security audit.

Top 50 Plugins

Plugin Count
elementor 1,770,670
contact-form-7 1,752,430
elementor-pro 1,052,476
woocommerce 816,098
revslider 609,110
jetpack 455,281
js_composer 420,184
wp-rocket 341,921
essential-addons-for-elementor-lite 264,914
complianz-gdpr 257,462
gravityforms 257,435
google-site-kit 232,555
cookie-law-info 228,544
instagram-feed 224,942
sitepress-multilingual-cms 210,671
header-footer-elementor 206,836
google-analytics-for-wordpress 205,959
bluehost-wordpress-plugin 192,462
elementskit-lite 180,242
gutenberg 167,162
cookie-notice 148,974
litespeed-cache 143,534
gtranslate 124,906
wpforms-lite 123,932
the-events-calendar 122,493
astra-sites 113,329
popup-maker 109,786
woocommerce-payments 109,450
gutenberg-core 106,504
tablepress 102,169
honeypot 97,746
astra-addon 93,790
wp-smushit 90,919
duracelltomi-google-tag-manager 90,369
layerslider 89,411
all-in-one-seo-pack 89,154
coblocks 87,767
bb-plugin 87,000
akismet 85,051
premium-addons-for-elementor 84,446
ml-slider 83,072
cleantalk-spam-protect 82,690
mailchimp-for-wp 81,877
megamenu 80,262
woocommerce-gateway-stripe 79,553
jet-engine 77,858
fusion-builder 77,168
ewww-image-optimizer 76,597
wp-pagenavi 76,492
smart-slider-3 76,197

Top 50 Themes

Theme Count
hello-elementor 621,008
Divi 496,644
astra 414,290
flatsome 137,871
Avada 121,202
generatepress 115,012
oceanwp 80,398
kadence 78,936
pub 74,605
enfold 68,814
salient 65,240
twentyseventeen 54,376
bb-theme 53,465
betheme 52,425
twentytwentyfour 52,233
blocksy 50,857
cocoon-master 49,213
dt-the7 45,470
twentytwentyfive 44,929
woodmart 42,965
neve 38,166
h4 37,144
Avada-Child-Theme 36,929
gox 36,231
bridge 31,369
twentytwentyone 30,344
lightning 29,931
twentytwenty 28,789
swell 27,967
bricks 26,477
Impreza 26,084
Newspaper 24,190
twentytwentythree 22,123
epik-redesign 19,169
twentytwentytwo 18,776
uncode 18,532
pro 17,631
twentysixteen 17,610
sydney 16,563
storefront 16,339
Total 14,409
hello-theme-child-master 14,016
factory-templates-4 13,732
themify-ultra 12,964
extendable 12,794
hestia 12,599
yootheme 12,534
yith-wonder 12,153
porto 11,942
twentyfifteen 11,851
Copyright 2026, tldwp.com. All rights reserved. WordPress OSINT or security needs? Reach out!