Domain Security Report: p*r*n*a*o*l*w*d*.com

Domain Information

WordPress Version: 6.8.3 VULNERABLE

Theme: astra 4.13.2· 100% conf. (theme used by 396,526 domains)

Last Checked: 2026-09-09 22:07:20

HTTPS: Yes

Server: cloudflare

CDN / WAF: Cloudflare

Response time (TTFB): 131 ms fast

Hosting: Cloudflare, Inc. (AS13335)

IP address: 172.67.217.xxx

Plugin	Version	Used By
advanced-coupons-for-woocommerce-free	4.7.5· 60% conf.	5,024
blog-designer-pack	4.0.12· 85% conf.	5,644
complianz-gdpr	—	250,139
customer-reviews-woocommerce	5.120.0· 85% conf.	11,344
eas-eu-compliance	—	61
facebook-for-woocommerce	3.7.6· 85% conf.	25,920
flexible-shipping	6.12.1.34· 60% conf.	19,534
megamenu	3.10.7· 60% conf.	78,019
official-facebook-pixel	5.2.2· 60% conf.	37,914
retainful-next-order-coupon-for-woocommerce	2.6.44· 60% conf.	201
secondary-product-image-for-woocommerce	1.1.0· 85% conf.	269
stackable-ultimate-gutenberg-blocks	3.19.9· 85% conf.	12,103
woo-discount-rules	2.6.17· 85% conf.	17,000
woo-multi-currency	2.2.16· 85% conf.	1,637
woo-product-country-base-restrictions	3.8.0· 60% conf.	1,136
woo-variation-gallery	1.8.1· 85% conf.	3,472
woo-variation-swatches	2.4.0· 85% conf.	30,805
woocommerce	10.7.0· 85% conf.	789,108
woocommerce-single-variations	1.4.0· 60% conf.	75

Grade F

5 missing headers

This domain has publicly accessible security-sensitive files or configurations:

Vulnerable WordPress Version (6.8.3) — unauthenticated SQL injection (CVE-2026-60137). Update to 6.8.6 immediately.
User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.