WordPress maintenance or security needs? Reach out!
TLDWP

Domain Details for a*b*w*a*.com

Site Information

WordPress Version: 6.9.4 VULNERABLE

Theme: yootheme-walitoff

Last Checked: 2026-07-15 16:49:24

HTTPS: Yes

Plugins (10)

Plugin Used By
altcha 384
sitepress-multilingual-cms 207,220
wc-prodamus 36
woocommerce 803,863
woocommerce-additional-variation-images 1,126
woocommerce-gift-cards 3,048
woocommerce-multilingual 26,060
woocommerce-points-and-rewards 945
woodev-russian-post 60
yith-woocommerce-wishlist-premium 1,346

Security Headers

F
Grade F

5 missing headers

Missing headers:

  • Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • X-Content-Type-Options — Prevents MIME sniffing ?
  • X-Frame-Options — Prevents clickjacking ?
  • Permissions-Policy — Limits browser features ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • Vulnerable WordPress Version (6.9.4) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress site? Contact us for a professional security audit.

Top 50 Plugins

Plugin Count
elementor 1,739,879
contact-form-7 1,728,571
elementor-pro 1,036,011
woocommerce 803,836
revslider 595,230
jetpack 447,273
js_composer 410,518
wp-rocket 330,484
essential-addons-for-elementor-lite 259,207
gravityforms 253,754
complianz-gdpr 253,072
google-site-kit 244,139
cookie-law-info 224,490
instagram-feed 220,952
sitepress-multilingual-cms 207,215
header-footer-elementor 201,775
google-analytics-for-wordpress 200,589
bluehost-wordpress-plugin 189,941
elementskit-lite 175,301
gutenberg 168,994
litespeed-cache 145,456
cookie-notice 145,433
gutenberg-core 143,862
gtranslate 121,507
the-events-calendar 121,062
wpforms-lite 119,506
astra-sites 109,584
popup-maker 107,489
woocommerce-payments 107,266
tablepress 101,602
honeypot 96,925
coblocks 96,563
astra-addon 91,882
duracelltomi-google-tag-manager 88,934
wp-smushit 88,823
layerslider 86,910
all-in-one-seo-pack 86,830
bb-plugin 85,005
akismet 83,406
ml-slider 82,207
premium-addons-for-elementor 81,462
cleantalk-spam-protect 80,681
mailchimp-for-wp 79,409
megamenu 78,992
ewww-image-optimizer 77,089
jet-engine 76,822
wp-pagenavi 76,733
fusion-builder 75,643
smart-slider-3 74,607
gravityformsrecaptcha 73,036

Top 50 Themes

Theme Count
hello-elementor 612,295
Divi 486,125
astra 405,338
flatsome 144,818
Avada 118,959
generatepress 112,712
pub 99,638
oceanwp 78,635
kadence 77,926
enfold 67,274
salient 63,779
twentyseventeen 53,353
twentytwentyfour 52,364
bb-theme 51,882
betheme 51,743
cocoon-master 50,235
blocksy 50,123
h4 50,093
twentytwentyfive 45,632
woodmart 44,793
dt-the7 44,690
neve 37,240
Avada-Child-Theme 36,501
gox 36,054
lightning 30,739
bridge 30,461
twentytwentyone 29,596
swell 29,230
twentytwenty 28,207
bricks 26,753
Impreza 25,647
Newspaper 23,752
twentytwentythree 21,574
epik-redesign 18,885
twentytwentytwo 18,351
uncode 18,083
twentysixteen 17,413
pro 17,359
storefront 15,909
sydney 15,821
Total 14,147
factory-templates-4 13,842
hello-theme-child-master 13,745
themify-ultra 12,760
hestia 12,351
yootheme 12,311
yith-wonder 11,791
porto 11,659
jupiter 11,647
twentyfifteen 11,546
Copyright 2026, tldwp.com. All rights reserved. WordPress maintenance or security needs? Reach out!