Domain Information
WordPress Version: 6.4.10 VULNERABLE
Theme: generatepress (theme used by 110,592 domains)
Last Checked: 2026-09-08 19:52:17
HTTPS: Yes
Server: nginx-rc
Response time (TTFB): 400 ms
Hosting: The Constant Company, LLC (AS20473)
IP address: 104.238.128.xxx
Plugins (11)
| Plugin | Version | Used By |
|---|---|---|
| akismet | — | 78,835 |
| animated-typing-effect | — | 2,925 |
| easy-fancybox | — | 45,145 |
| fluentform | — | 56,696 |
| fx-editor | — | 685 |
| gp-premium | — | 52,350 |
| shortcodes-ultimate | — | 19,344 |
| shortcodes-ultimate-extra | — | 193 |
| visual-columns | — | 24 |
| visual-form-builder | — | 675 |
| wp-testimonial-with-widget-pro | — | 312 |
Security Headers
3 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.4.10) — outdated core with known vulnerabilities. Update to the latest release immediately.
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.