WordPress maintenance or security needs? Reach out!
TLDWP

Domain Security Report for m*n*g*-*o*f*r*.com

Domain Information

WordPress Version: 4.8.2 VULNERABLE

Theme: Unknown

Last Checked: 2026-09-11 00:32:09

HTTPS: Yes

Server: nginx

Response time (TTFB): 2,451 ms slow

Hosting: Grupo Loading Systems, S.L. (AS198066)

IP address: 217.61.208.xxx

Plugins (24)

Plugin Version Used By
advanced-woo-search-pro 1,309
awesome-support 6.0.1· 85% conf. 857
checkout-field-editor-and-manager-for-woocommerce 2.1.7· 60% conf. 2,077
click-to-chat-for-whatsapp 4.37· 85% conf. 56,886
contact-form-7 4.9· 85% conf. 1,694,402
easy-fancybox 1.6· 85% conf. 45,048
js_composer 5.3· 85% conf. 400,654
one-click-order-reorder 1.1.5· 85% conf. 229
popup-maker-wp 398
quadmenu 3.1.0· 85% conf. 3,232
responsive-menu-pro 4.3.5· 85% conf. 3,263
revslider 5.4.6· 85% conf. 580,456
sidebar-login 1,375
sitepress-multilingual-cms 202,843
tabla 0
types 2.4.5· 85% conf. 4,520
ultimate_vc_addons 3.16.18· 85% conf. 52,978
visualcomposer 35.1· 85% conf. 3,919
woocommerce 4.5.2· 85% conf. 781,569
woocommerce-menu-bar-cart 2.14.3· 85% conf. 13,050
woocommerce-multilingual 4.2.5· 85% conf. 25,513
woocommerce-views 2.7.4· 85% conf. 610
wp-show-posts 1.1.3· 60% conf. 17,080
wp-views 2.4.1· 85% conf. 7,734

Security Headers

F
Grade F

5 missing headers

Missing headers:

  • Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
  • X-Content-Type-Options — Prevents MIME sniffing ?
  • X-Frame-Options — Prevents clickjacking ?
  • Referrer-Policy — Controls referrer information ?
  • Permissions-Policy — Limits browser features ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • Vulnerable WordPress Version (4.8.2) — outdated core with known vulnerabilities. Update to the latest release immediately.
  • info.php exposed — Server configuration publicly visible ?
  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.