Domain Security Report: m*r*g*l*b*r*.com

Domain Information

WordPress Version: 7.0 VULNERABLE

Theme: astra (theme used by 396,526 domains)

Last Checked: 2026-08-31 15:21:44

HTTPS: Yes

Plugin	Version	Used By
advanced-coupons-for-woocommerce	—	1,717
advanced-coupons-for-woocommerce-free	—	5,024
affiliate-wp	—	5,075
astra-addon	—	90,405
auto-advance-for-gravity-forms-premium	—	138
cart-for-woocommerce	—	3,415
cleantalk-spam-protect	—	79,419
duracelltomi-google-tag-manager	—	87,509
elementor	—	1,707,286
elementor-pro	—	1,017,560
gravityforms	—	249,817
instagram-feed-pro	—	31,723
jet-elements	—	62,959
jet-menu	—	28,002
jet-woo-builder	—	11,529
klaviyo	—	9,110
klaviyo-toolkit	—	111
marigoldbars-plugin	—	0
metorik-helper	—	3,002
pinterest-for-woocommerce	—	4,589
pixelyoursite-pro	—	10,002
pixelyoursite-super-pack	—	2,419
seo-by-rank-math-pro	—	29,596
tiktok-for-business	—	4,170
woocommerce	—	789,108
woocommerce-all-products-for-subscriptions	—	1,662
woocommerce-back-in-stock-notifications	—	1,344
woocommerce-composite-products	—	1,923
woocommerce-gateway-authorize-net-cim	—	7,875
woocommerce-paypal-payments	—	34,806
woocommerce-smart-coupons	—	4,500
woocommerce-social-login	—	580
woocommerce-table-rate-shipping	—	5,061
wp-analytify-pro	—	1,361
wp-marketing-automations	—	2,810
xl-woocommerce-sales-triggers	—	135

Grade F

5 missing headers

This domain has publicly accessible security-sensitive files or configurations:

Vulnerable WordPress Version (7.0) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 7.0.2 immediately.
User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.