Domain Information
WordPress Version: 7.0.4
Theme: twentyeleven 2.6· 100% conf. (theme used by 9,745 domains)
Last Checked: 2026-09-11 10:00:50
HTTPS: Yes
Server: Apache
Response time (TTFB): 1,073 ms slow
Hosting: Oracle Corporation (AS31898)
IP address: 50.6.204.xxx
PHP version: 7.4.33 — end-of-life, no security updates
Plugins (13)
| Plugin | Version | Used By |
|---|---|---|
| captcha | 4.4.5· 85% conf. | 9,075 |
| djd-site-post | — | 19 |
| godaddy-email-marketing-sign-up-forms | 1.4.2· 85% conf. | 1,709 |
| google-analytics-for-wordpress | 11.1.1· 60% conf. | 194,301 |
| jetpack | 1.3· 85% conf. | 402,304 |
| mailin | — | 44,464 |
| paid-member-subscriptions | 3.0.8· 85% conf. | 2,226 |
| paypal-payments | — | 11 |
| post-as-guest | — | 6 |
| social-media-buttons-toolbar | 4.56· 85% conf. | 2,245 |
| social-polls-by-opinionstage | 19.12.7· 60% conf. | 1,487 |
| wp-e-commerce | 3.13.1.361d748· 85% conf. | 547 |
| wp-members | 3.5.6· 60% conf. | 8,692 |
Security Headers
5 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- phpinfo.php exposed — Server configuration publicly visible ?
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.