Domain Security Report: t*t*o*a*t*s*m*g*z*n*.com

Domain Information

WordPress Version: 7.0.1 VULNERABLE

Theme: astra (theme used by 394,051 domains)

Last Checked: 2026-07-27 12:03:00

HTTPS: Yes

Plugins (35)

Plugin	Version	Used By
advanced-product-labels-for-woocommerce	—	2,468
astra-addon	—	89,810
bbpress	—	13,211
classic-menu-block	—	384
click-to-chat-for-whatsapp	—	57,052
daves-tam-slider-gallery	—	0
elementor	—	1,695,155
elementor-pro	—	1,009,656
elementskit-lite	—	169,951
elespare-pro	—	21
eventprime-elementor-integration-main	—	113
eventprime-event-calendar-management	—	1,313
gtranslate	—	118,854
header-footer-elementor	—	195,990
mycred	—	1,337
newsletter	—	44,987
profilegrid-user-profiles-groups-and-communities	—	713
profilegrid-user-profiles-groups-and-communities-profilegrid-advanced-woocommerce-integration	—	7
profilegrid-user-profiles-groups-and-communities-profilegrid-custom-profile-tabs	—	60
profilegrid-user-profiles-groups-and-communities-profilegrid-elementor-content-restrictions	—	19
profilegrid-user-profiles-groups-and-communities-profilegrid-elementor-integration	—	41
profilegrid-user-profiles-groups-and-communities-profilegrid-eventprime-integration	—	6
profilegrid-user-profiles-groups-and-communities-profilegrid-groups-carousel-widget	—	17
profilegrid-user-profiles-groups-and-communities-profilegrid-instagram-integration	—	19
profilegrid-user-profiles-groups-and-communities-profilegrid-menu-restrictions	—	43
profilegrid-user-profiles-groups-and-communities-profilegrid-mycred	—	5
profilegrid-user-profiles-groups-and-communities-profilegrid-profile-completeness	—	23
profilegrid-user-profiles-groups-and-communities-profilegrid-social-connect	—	18
profilegrid-user-profiles-groups-and-communities-profilegrid-user-photos-extension	—	33
profilegrid-user-profiles-groups-and-communities-profilegrid-widgets-privacy	—	16
royal-elementor-addons	—	52,553
tablepress	—	100,417
woocommerce	—	783,975
woocommerce-gateway-stripe	—	57,963
woocommerce-subscriptions	—	12,903

Security Headers

Grade B

1 missing header

Missing headers:

Permissions-Policy — Limits browser features ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

Vulnerable WordPress Version (7.0.1) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 7.0.2 immediately.

Need help securing your WordPress infrastructure? Contact us for a professional security audit.