WordPress maintenance or security needs? Reach out!
TLDWP

Domain Security Report for n*c*a*v*n.com

Domain Information

WordPress Version: 7.0.2

Theme: astra (theme used by 396,526 domains)

Last Checked: 2026-07-25 18:46:57

HTTPS: Yes

Plugins (12)

Plugin Version Used By
amplitude 289
astra-sites 106,045
cf7-conditional-fields 32,958
contact-form-7 1,699,668
contact-form-7-image-captcha 13,982
elementor 1,696,826
essential-addons-for-elementor-lite 251,862
happy-elementor-addons 47,260
header-footer-elementor 196,132
mystickymenu 16,666
sticky-menu-or-anything-on-scroll 18,249
timeline-widget-addon-for-elementor 988

Security Headers

C
Grade C

2 missing headers

Missing headers:

  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • Permissions-Policy — Limits browser features ?

Exposed Files & Configurations

No exposed files detected

Our automated scan did not detect any publicly-accessible sensitive files or critical misconfigurations on this domain.

However, this does not mean the site is completely secure. There are many other potential vulnerabilities that require deeper analysis:

  • Outdated themes or plugins
  • Outdated third-party scripts and software
  • Weak passwords and authentication
  • SQL injection vulnerabilities
  • Cross-site scripting (XSS) issues
  • Insecure server configurations
  • OS command injection vulnerabilities
  • Unprotected file uploads
  • ...

Questions about your WordPress security? Reach out — we offer comprehensive security audits and can help identify hidden vulnerabilities.