Domain Information
WordPress Version: 7.0.1 VULNERABLE
Theme: mayosis-child (theme used by 20 domains)
Last Checked: 2026-07-20 17:15:21
HTTPS: Yes
Plugins (19)
| Plugin | Version | Used By |
|---|---|---|
| affiliate-wp | — | 5,075 |
| bdthemes-element-pack | — | 24,686 |
| easy-accordion-pro | — | 363 |
| easy-digital-downloads-pro | — | 955 |
| easy-social-share-buttons3 | — | 4,777 |
| edd-all-access | — | 286 |
| edd-multi-currency | — | 114 |
| edd-recurring | — | 807 |
| edd-reviews | — | 147 |
| elementor | — | 1,707,286 |
| elementor-pro | — | 1,017,560 |
| frontend-reset-password | — | 2,235 |
| jetpack | — | 411,832 |
| mayosis-core | — | 60 |
| notificationx | — | 1,688 |
| notificationx-pro | — | 316 |
| pixelyoursite-pinterest | — | 815 |
| pixelyoursite-pro | — | 10,002 |
| pixelyoursite-super-pack | — | 2,419 |
Security Headers
F
Grade F
5 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (7.0.1) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 7.0.2 immediately.
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.