Site Information
WordPress Version: 6.3.5 VULNERABLE
Theme: Avada (used by 121,565 domains)
Last Checked: 2026-07-28 09:39:43
HTTPS: Yes
Plugins (13)
| Plugin | Used By |
|---|---|
| ajax-search-for-woocommerce | 21,155 |
| elementor | 1,775,447 |
| elementor-pro | 1,054,368 |
| fusion-builder- | 5 |
| fusion-core- | 0 |
| password-strength-for-woocommerce | 208 |
| shiftnav-responsive-mobile-menu | 4,649 |
| sitepress-multilingual-cms | 211,042 |
| woo-shipping-display-mode | 255 |
| woocommerce | 817,198 |
| woocommerce-memberships | 7,664 |
| woocommerce-reward-points | 65 |
| yith-woocommerce-wishlist | 41,767 |
Security Headers
D
Grade D
3 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.3.5) — CVE-2024-4439: Unauthenticated Stored XSS. Update to 6.5.2 or later immediately.
Need help securing your WordPress site? Contact us for a professional security audit.