WordPress maintenance or security needs? Reach out!
TLDWP

Domain Security Report for c*r*v*l*e*i*i*a*.com

Domain Information

WordPress Version: 6.7.5

Theme: jevelin (theme used by 1,194 domains)

Last Checked: 2026-07-28 18:02:01

HTTPS: Yes

Plugins (12)

Plugin Version Used By
contact-form-7 1,685,958
cookie-law-info 218,086
js_composer 398,232
kiwi-logo-carousel 2,309
real-time-auto-find-and-replace 9,073
revslider 576,849
simple-share-buttons-adder 8,973
svg-vector-icon-plugin 3,165
unyson 6,822
wp-floating-menu 862
wp-meta-and-date-remover 6,462
wp-social-sharing 1,114

Security Headers

B
Grade B

1 missing header

Missing headers:

  • X-Frame-Options — Prevents clickjacking ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.