WordPress maintenance or security needs? Reach out!
TLDWP

Domain Security Report for l*t*l*b*.com

Domain Information

WordPress Version: 7.0 VULNERABLE

Theme: hello-elementor (theme used by 597,939 domains)

Last Checked: 2026-08-22 03:27:32

HTTPS: Yes

Plugins (28)

Plugin Version Used By
addify-payment-gateway-fee-discounts-new 0
advanced-free-flat-shipping-woocommerce-pro 213
advanced-woo-search 10,283
checkout-for-woocommerce 2,499
conditional-payments-for-woocommerce-pro 195
contact-form-7 1,698,348
cryptocurrency-payment-gateway 93
elementor 1,695,155
elementor-pro 1,009,656
gtm-server-side 1,009
metorik-helper 2,965
omnisend-connect 2,213
pixelyoursite-pro 9,927
pixelyoursite-super-pack 2,399
revslider 582,336
seo-by-rank-math-pro 29,505
sp-compliance-gate 5
sp-mailman 0
tier-pricing-table 1,956
woo-authorize-net-gateway-enterprise 173
woo-discount-rules 16,886
woo-discount-rules-pro 8,102
woocommerce 783,975
woocommerce-product-table 170
wp-persistent-login-premium 31
wp-smush-pro 44,005
wp-super-page-cache-pro 142
yotpo-social-reviews-for-woocommerce 623

Security Headers

B
Grade B

1 missing header

Missing headers:

  • Content-Security-Policy (CSP) — Prevents XSS attacks ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • Fatal PHP Error — PHP errors displayed publicly, exposing sensitive paths ?
  • Vulnerable WordPress Version (7.0) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 7.0.2 immediately.
  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.