WordPress maintenance or security needs? Reach out!
TLDWP

Domain Security Report for m*a*c.org

Domain Information

WordPress Version: 7.0.2

Theme: charity-is-hope (theme used by 113 domains)

Last Checked: 2026-07-23 07:30:44

HTTPS: Yes

Plugins (19)

Plugin Version Used By
contact-form-7 1,694,402
essential-grid 33,283
form-maker 4,870
gdpr-framework 2,052
give 17,104
give-authorize-net 391
js_composer 400,654
recaptcha-woo 9,774
revslider 580,456
the-events-calendar 117,404
trx_utils 2,887
ultimate_vc_addons 52,978
woocommerce 781,569
woocommerce-additional-fees 959
woocommerce-gateway-authorize-net-cim 7,683
woocommerce-gateway-stripe 57,111
woocommerce-out-of-stock-message 44
woocommerce-payments 101,077
woocommerce-subscriptions 12,854

Security Headers

F
Grade F

5 missing headers

Missing headers:

  • Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • X-Content-Type-Options — Prevents MIME sniffing ?
  • X-Frame-Options — Prevents clickjacking ?
  • Referrer-Policy — Controls referrer information ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.