Site Information
WordPress Version: 7.0.1 ✓
Theme: astra (used by 422,665 domains)
Last Checked: 2026-07-11 23:40:44
HTTPS: ✅ Yes
Plugins (14)
| Plugin | Used By |
|---|---|
| blog-designer-for-post-and-widget | 820 |
| cleantalk-spam-protect | 83,986 |
| envira-downloads | 8 |
| envira-gallery | 1,560 |
| envira-slideshow | 46 |
| envira-tags | 962 |
| envira-videos | 247 |
| gtranslate | 127,443 |
| otter-blocks | 14,970 |
| paid-memberships-pro | 10,301 |
| preloader-for-website | 253 |
| ultimate-blocks | 11,037 |
| widgets-on-pages | 2,406 |
| wp-staging | 1,348 |
Security Headers
B
Grade B
1 missing header
Missing Headers:
- Content-Security-Policy (CSP) — Prevents XSS attacks ?
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- phpinfo.php exposed — Server configuration publicly visible ?
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress site? Contact us for a professional security audit.