Domain Information
WordPress Version: 7.0 VULNERABLE
Theme: neve 4.2.5· 100% conf. (theme used by 36,309 domains)
Last Checked: 2026-09-10 22:01:49
HTTPS: Yes
Server: LiteSpeed
Response time (TTFB): 2,751 ms slow
Hosting: Nodea Spolka Z Ograniczona Odpowiedzialnoscia (AS214349)
IP address: 83.168.99.xxx
PHP version: 8.1.34 — end-of-life, no security updates
Plugins (14)
| Plugin | Version | Used By |
|---|---|---|
| addons-for-elementor | 9.0· 85% conf. | 4,885 |
| ays-popup-box | 6.3.1· 85% conf. | 9,677 |
| cleantalk-spam-protect | 6.81_1781738149· 85% conf. | 78,366 |
| contact-form-7 | 6.1.6· 85% conf. | 1,694,402 |
| custom-twitter-feeds | 2.6.1· 85% conf. | 30,987 |
| elementor | 4.1.3· 85% conf. | 1,689,719 |
| elementskit-lite | 3.9.8· 85% conf. | 169,378 |
| essential-addons-for-elementor-lite | 6.6.7· 85% conf. | 250,728 |
| feeds-for-youtube | 2.7.0· 85% conf. | 11,283 |
| header-footer-elementor | 2.8.8· 85% conf. | 195,384 |
| mailin | — | 44,464 |
| sticky-header-effects-for-elementor | 2.1.9· 85% conf. | 35,500 |
| xpro-elementor-addons | 1.7.3· 85% conf. | 3,566 |
| xpro-theme-builder | 1.2.11· 85% conf. | 1,174 |
Security Headers
5 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (7.0) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 7.0.2 immediately.
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.
Other WordPress domains on this IP (7)
These WordPress domains are served from the same IP (83.168.99.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.