WordPress maintenance or security needs? Reach out!
TLDWP

Domain Details for b*b*c*r*m*c*.com

Site Information

WordPress Version: 6.9.4 VULNERABLE

Theme: astra (used by 413,479 domains)

Last Checked: 2026-07-06 09:47:44

HTTPS: Yes

Plugins (10)

Plugin Used By
ameliabooking 7,239
astra-sites 112,993
contact-form-7 1,749,971
elementor 1,769,539
flexible-shipping 19,796
header-footer-elementor 206,422
mojo-marketplace-wp-plugin 19,129
woocommerce 816,085
woocommerce-gateway-stripe 79,292
woocommerce-payments 109,109

Security Headers

F
Grade F

5 missing headers

Missing headers:

  • Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • X-Content-Type-Options — Prevents MIME sniffing ?
  • X-Frame-Options — Prevents clickjacking ?
  • Referrer-Policy — Controls referrer information ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • Vulnerable WordPress Version (6.9.4) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress site? Contact us for a professional security audit.

Top 50 Plugins

Plugin Count
elementor 1,769,546
contact-form-7 1,749,981
elementor-pro 1,052,223
woocommerce 816,082
revslider 607,977
jetpack 454,169
js_composer 419,320
wp-rocket 341,914
essential-addons-for-elementor-lite 264,421
gravityforms 256,924
complianz-gdpr 256,737
google-site-kit 232,875
cookie-law-info 227,814
instagram-feed 224,435
sitepress-multilingual-cms 210,461
header-footer-elementor 206,426
google-analytics-for-wordpress 205,227
bluehost-wordpress-plugin 192,353
elementskit-lite 179,948
gutenberg 167,312
cookie-notice 148,571
litespeed-cache 144,502
gtranslate 124,687
wpforms-lite 123,530
the-events-calendar 122,126
astra-sites 112,994
popup-maker 109,488
woocommerce-payments 109,111
gutenberg-core 103,132
tablepress 102,372
honeypot 97,721
astra-addon 93,680
wp-smushit 90,667
duracelltomi-google-tag-manager 90,296
layerslider 89,062
all-in-one-seo-pack 88,933
bb-plugin 86,786
coblocks 86,664
akismet 84,909
premium-addons-for-elementor 84,280
cleantalk-spam-protect 82,390
ml-slider 82,251
mailchimp-for-wp 81,565
megamenu 80,147
woocommerce-gateway-stripe 79,293
jet-engine 77,971
fusion-builder 76,925
ewww-image-optimizer 76,777
wp-pagenavi 76,482
smart-slider-3 76,014

Top 50 Themes

Theme Count
hello-elementor 620,559
Divi 495,186
astra 413,486
flatsome 139,309
Avada 120,788
generatepress 114,633
oceanwp 80,215
kadence 78,625
pub 72,283
enfold 68,633
salient 65,039
twentyseventeen 54,205
bb-theme 53,345
betheme 52,372
twentytwentyfour 52,317
blocksy 50,753
cocoon-master 49,244
dt-the7 45,391
twentytwentyfive 44,990
woodmart 43,696
neve 38,026
Avada-Child-Theme 36,901
gox 36,289
h4 36,036
bridge 31,221
twentytwentyone 30,243
lightning 30,028
twentytwenty 28,729
swell 28,063
bricks 26,498
Impreza 26,031
Newspaper 24,165
twentytwentythree 22,103
epik-redesign 19,110
twentytwentytwo 18,748
uncode 18,454
pro 17,625
twentysixteen 17,590
sydney 16,367
storefront 16,296
Total 14,353
hello-theme-child-master 14,025
factory-templates-4 13,734
themify-ultra 12,929
extendable 12,681
hestia 12,551
yootheme 12,472
yith-wonder 12,080
porto 11,949
twentyfifteen 11,850
Copyright 2026, tldwp.com. All rights reserved. WordPress maintenance or security needs? Reach out!