WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Domain Details for l*c*d*r*a*s*o*c*s*.com

Site Information

WordPress Version: 7.0 VULNERABLE

Theme: yith-wonder (used by 12,207 domains)

Last Checked: 2026-07-06 20:27:39

HTTPS: Yes

Plugins (10)

Plugin Used By
bluehost-wordpress-plugin 192,589
creative-mail-by-constant-contact 68,804
elementor 1,773,083
elementor-pro 1,053,400
elementskit 21,479
elementskit-lite 180,627
mailin 45,881
make-section-column-clickable-elementor 2,343
music-player-for-elementor-premium 169
podcast-subscribe-buttons 2,055

Security Headers

D
Grade D

4 missing headers

Missing headers:

  • Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • X-Content-Type-Options — Prevents MIME sniffing ?
  • X-Frame-Options — Prevents clickjacking ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • Vulnerable WordPress Version (7.0) — CVE-2026-63030: Unauthenticated RCE (wp2shell). Update to 7.0.2 or later immediately.
  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress site? Contact us for a professional security audit.

Top 50 Plugins

Plugin Count
elementor 1,773,066
contact-form-7 1,754,699
elementor-pro 1,053,398
woocommerce 816,868
revslider 609,950
jetpack 456,151
js_composer 420,819
wp-rocket 341,566
essential-addons-for-elementor-lite 265,266
complianz-gdpr 257,980
gravityforms 257,686
google-site-kit 232,621
cookie-law-info 228,902
instagram-feed 225,266
sitepress-multilingual-cms 210,874
header-footer-elementor 207,407
google-analytics-for-wordpress 206,188
bluehost-wordpress-plugin 192,588
elementskit-lite 180,622
gutenberg 167,311
cookie-notice 149,235
litespeed-cache 143,547
gtranslate 125,193
wpforms-lite 124,272
the-events-calendar 122,579
astra-sites 113,631
gutenberg-core 113,508
popup-maker 110,000
woocommerce-payments 109,709
tablepress 102,202
honeypot 97,891
astra-addon 93,947
wp-smushit 91,090
duracelltomi-google-tag-manager 90,451
coblocks 89,789
layerslider 89,525
all-in-one-seo-pack 89,300
bb-plugin 87,066
akismet 85,166
premium-addons-for-elementor 84,433
ml-slider 83,034
cleantalk-spam-protect 82,813
mailchimp-for-wp 82,012
megamenu 80,374
woocommerce-gateway-stripe 79,700
jet-engine 77,827
fusion-builder 77,281
ewww-image-optimizer 76,638
wp-pagenavi 76,523
smart-slider-3 76,327

Top 50 Themes

Theme Count
hello-elementor 621,543
Divi 497,327
astra 415,116
flatsome 137,795
Avada 121,363
generatepress 114,678
oceanwp 80,569
pub 79,286
kadence 78,818
enfold 68,928
salient 65,362
twentyseventeen 54,403
bb-theme 53,484
betheme 52,451
twentytwentyfour 52,191
blocksy 51,007
cocoon-master 49,241
dt-the7 45,528
twentytwentyfive 44,925
woodmart 42,693
h4 39,561
neve 38,220
Avada-Child-Theme 36,954
gox 36,252
bridge 31,437
twentytwentyone 30,343
lightning 29,939
twentytwenty 28,835
swell 27,982
bricks 26,516
Impreza 26,104
Newspaper 24,234
twentytwentythree 22,139
epik-redesign 19,181
twentytwentytwo 18,831
uncode 18,592
twentysixteen 17,623
pro 17,621
sydney 16,585
storefront 16,374
Total 14,410
hello-theme-child-master 14,004
factory-templates-4 13,730
themify-ultra 12,971
extendable 12,866
hestia 12,599
yootheme 12,547
yith-wonder 12,223
porto 11,980
twentyfifteen 11,835
Copyright 2026, tldwp.com. All rights reserved. WordPress OSINT or security needs? Reach out!