Site Information
WordPress Version: 7.0.2
Theme: Avada-Child-Theme (used by 36,890 domains)
Last Checked: 2026-07-28 18:21:18
HTTPS: Yes
Plugins (16)
| Plugin | Used By |
|---|---|
| 3d-flipbook-dflip-lite | 43,895 |
| borlabs-cookie | 65,031 |
| cool-timeline-pro | 749 |
| gravityforms | 256,969 |
| h5p | 4,803 |
| hash-link-scroll-offset | 401 |
| popup-maker | 109,493 |
| post-grid-and-filter-ultimate | 927 |
| simple-cloudflare-turnstile | 16,282 |
| star-rating-field-for-gravity-form | 64 |
| sticky-menu-or-anything-on-scroll | 18,863 |
| structured-content | 5,372 |
| tabs-responsive | 3,550 |
| wp-expand-tabs-free | 1,646 |
| wpfront-scroll-top | 33,564 |
| zeno-font-resizer | 1,191 |
Security Headers
B
Grade B
1 missing header
Missing headers:
- Content-Security-Policy (CSP) — Prevents XSS attacks ?
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress site? Contact us for a professional security audit.