Domain Information
WordPress Version: 7.1
Theme: bridge (theme used by 29,903 domains)
Last Checked: 2026-09-02 06:21:14
HTTPS: Yes
Plugins (19)
| Plugin | Version | Used By |
|---|---|---|
| bridge-core | — | 19,286 |
| cf7-phone-mask-field | — | 3,395 |
| cf7-power-pack | — | 37 |
| cf7-redirect-thank-you-page | — | 1,534 |
| cf7-repeatable-fields | — | 1,281 |
| conditional-fields-pro-2 | — | 0 |
| contact-form-7 | — | 1,698,348 |
| curoilselected | — | 0 |
| date-time-picker-for-contact-form-7 | — | 4,467 |
| groovy-menu_2 | — | 0 |
| js_composer | — | 401,781 |
| mabel-wheel-of-fortune | — | 551 |
| no-right-click-images-plugin | — | 5,277 |
| page-scroll-to-id | — | 27,664 |
| pdf-poster-pro | — | 153 |
| popup-anything-on-click | — | 5,933 |
| revslider | — | 582,336 |
| show-hidecollapse-expand | — | 2,786 |
| wp-timelines | — | 1,523 |
Security Headers
B
Grade B
1 missing header
Missing headers:
- Content-Security-Policy (CSP) — Prevents XSS attacks ?
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.