WordPress maintenance or security needs? Reach out!
TLDWP

Domain Security Report for s*r*a*e*e*o.com

Domain Information

WordPress Version: 6.3 VULNERABLE

Theme: hello-elementor (theme used by 602,418 domains)

Last Checked: 2026-08-21 12:08:52

HTTPS: Yes

Plugins (28)

Plugin Version Used By
ajax-search-for-woocommerce 20,766
banner-management-for-woocommerce 322
bwd-awesome-step 42
contact-form-7 1,707,342
contact-form-7-datepicker 5,050
contact-form-7-star-rating-with-font-awersome 116
custom-shortcode-plugin 9
elementor 1,707,286
elementor-pro 1,017,560
elementskit-lite 171,388
megamenu 78,019
menu-image 23,127
pdf-print 2,054
popup-message-contact-form-7 276
side-cart-woocommerce 8,845
skyboot-custom-icons-for-elementor 14,389
ultimate-member 26,957
wc-product-bundles 20
widgetize-pages-light 824
woo-custom-add-to-cart-button 1,264
woo-product-slider-and-carousel-with-category 1,003
woocommerce 789,108
woocommerce-ajax-filters 6,513
wp-datepicker 1,288
wp-slick-slider-and-image-carousel 2,904
wp-statistics 55,397
wp-visual-slidebox-builder 241
wpcf7-redirect 53,558

Security Headers

F
Grade F

5 missing headers

Missing headers:

  • Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • X-Frame-Options — Prevents clickjacking ?
  • Referrer-Policy — Controls referrer information ?
  • Permissions-Policy — Limits browser features ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • Vulnerable WordPress Version (6.3) — outdated core with known vulnerabilities. Update to the latest release immediately.
  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.