Site Information
WordPress Version: 6.9.4 ✓
Theme: sydney (used by 16,721 domains)
Last Checked: 2026-07-13 00:06:36
HTTPS: ✅ Yes
Plugins (26)
| Plugin | Used By |
|---|---|
| all-in-one-event-calendar | 6,740 |
| cf7-conditional-fields | 33,993 |
| cleantalk-spam-protect | 83,522 |
| contact-form-7 | 1,769,647 |
| content-views-query-and-display-post-page | 27,605 |
| count-per-day | 4,514 |
| cta | 387 |
| megamenu | 81,061 |
| nextgen-gallery | 17,711 |
| rating-widget | 451 |
| siteorigin-panels | 57,547 |
| so-widgets-bundle | 29,065 |
| social-polls-by-opinionstage | 1,590 |
| svegliat-buttons | 47 |
| svg-vector-icon-plugin | 3,412 |
| the-events-calendar | 123,520 |
| themeisle-companion | 10,692 |
| ultimate-social-media-icons | 27,027 |
| ultimate-social-media-plus | 3,708 |
| visitors-traffic-real-time-statistics | 5,016 |
| wbounce | 166 |
| widget-countdown | 2,193 |
| wp-members | 9,007 |
| wp-polls | 10,490 |
| wp-power-stats | 778 |
| wpi-designer-button-shortcode | 325 |
Security Headers
C
Grade C
2 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress site? Contact us for a professional security audit.