Domain Information
WordPress Version: 6.9.4 VULNERABLE
Theme: luxa (theme used by 80 domains)
Last Checked: 2026-07-25 11:10:14
HTTPS: Yes
Plugins (13)
| Plugin | Version | Used By |
|---|---|---|
| contact-form-7 | — | 1,699,668 |
| foobox-image-lightbox | — | 23,777 |
| js_composer | — | 402,159 |
| modern-events-calendar-lite | — | 13,591 |
| pt-luxa-addons | — | 84 |
| simple-job-board | — | 2,938 |
| superstorefinder-wp | — | 1,020 |
| unyson | — | 6,896 |
| wp-colorbox | — | 1,116 |
| wp-job-openings | — | 8,241 |
| wp-store-locator | — | 16,617 |
| wp-user-avatar | — | 24,586 |
| wp-video-lightbox | — | 9,618 |
Security Headers
D
Grade D
3 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.9.4) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
Need help securing your WordPress infrastructure? Contact us for a professional security audit.