WordPress maintenance or security needs? Reach out!
TLDWP

Domain Security Report for p*o*e*r*a*e*y.com

Domain Information

WordPress Version: 5.3.23 VULNERABLE

Theme: nex (theme used by 334 domains)

Last Checked: 2026-09-09 19:17:28

HTTPS: Yes

Server: nginx

Response time (TTFB): 1,439 ms slow

Hosting: Hetzner Online GmbH (AS24940)

IP address: 116.203.45.xxx

Plugins (24)

Plugin Version Used By
beaver-builder-lite-version 7,744
booked 2.2.5· 85% conf. 8,757
booked-frontend-agents 2.2.5· 85% conf. 362
booked-woocommerce-payments 232
color-filters 2.1.0a· 60% conf. 55
elementor 2.7.5· 85% conf. 1,707,286
elementor-pro 2.6.3· 85% conf. 1,017,560
jetpack 1.3· 85% conf. 411,832
megamenu 2.7.3· 60% conf. 78,019
mystickymenu 2.2.6· 85% conf. 16,775
revslider 6.1.3· 85% conf. 586,216
svg-support 27,866
the-events-calendar 4.9.21· 85% conf. 118,844
themify-wc-product-filter 1.2.2· 85% conf. 482
ultimate-hover-effects 67
vamtam-elements-b 843
widget-options 28,340
woo-products-by-category 1.2.2· 60% conf. 183
woocommerce 4.5.5· 85% conf. 789,108
woocommerce-ajax-filters 6,513
woocommerce-catalog-enquiry 3.2.1· 85% conf. 424
woocommerce-product-image-flipper 481
woocommerce-products-filter 1.2.3· 85% conf. 11,337
wp-whatsapp-chat 4.5.2· 85% conf. 25,169

Security Headers

D
Grade D

4 missing headers

Missing headers:

  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • X-Frame-Options — Prevents clickjacking ?
  • Referrer-Policy — Controls referrer information ?
  • Permissions-Policy — Limits browser features ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • Vulnerable WordPress Version (5.3.23) — outdated core with known vulnerabilities. Update to the latest release immediately.
  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.

Other WordPress domains on this IP (2)

These WordPress domains are served from the same IP (116.203.45.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.