Domain Information
WordPress Version: 7.0 VULNERABLE
Theme: mai-success (theme used by 189 domains)
Last Checked: 2026-07-23 13:08:36
HTTPS: Yes
Plugins (18)
| Plugin | Version | Used By |
|---|---|---|
| daily-reflection | — | 0 |
| elfsight-weather-cc | — | 269 |
| espee-zoom | — | 0 |
| farside | — | 0 |
| google-analytics-premium | — | 13,423 |
| gutenberg | — | 136,645 |
| kadence-blocks | — | 62,311 |
| mai-engine | — | 1,687 |
| mai-icons | — | 1,445 |
| reactpress | — | 942 |
| searchwp-live-ajax-search | — | 12,383 |
| step-2-custom | — | 0 |
| step2-birthdays | — | 0 |
| step2-ccfaa | — | 0 |
| step2-next-meeting | — | 0 |
| step2-search | — | 0 |
| wp-featherlight | — | 8,372 |
| wpforms | — | 51,814 |
Security Headers
B
Grade B
1 missing header
Missing headers:
- Content-Security-Policy (CSP) — Prevents XSS attacks ?
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (7.0) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 7.0.2 immediately.
Need help securing your WordPress infrastructure? Contact us for a professional security audit.