WordPress maintenance or security needs? Reach out!
TLDWP

Domain Security Report for a*v*t*.com

Domain Information

WordPress Version: 7.0 VULNERABLE

Theme: hello-elementor (theme used by 597,939 domains)

Last Checked: 2026-09-01 19:41:01

HTTPS: Yes

Plugins (23)

Plugin Version Used By
bookly-addon-customer-cabinet 223
bookly-addon-packages 77
bookly-addon-pro 3,384
bookly-addon-special-days 87
bookly-addon-staff-cabinet 183
bookly-responsive-appointment-booking-tool 6,671
clientify-addons-wc 62
complianz-gdpr 248,631
elementor 1,695,155
essential-addons-for-elementor-lite 251,601
gtm-kit 5,515
gtranslate 118,854
happy-elementor-addons 47,196
happy-elementor-addons-pro 7,855
independent-analytics-pro 5,595
powerpack-elements 14,650
pro-elements 60,397
softlite-io-integration 841
woocommerce 783,975
woocommerce-payments 101,569
wp-loyalty-rules 844
wp-rocket 316,571
wp-whatsapp-chat 24,978

Security Headers

D
Grade D

3 missing headers

Missing headers:

  • Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • Permissions-Policy — Limits browser features ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • Vulnerable WordPress Version (7.0) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 7.0.2 immediately.

Need help securing your WordPress infrastructure? Contact us for a professional security audit.