WordPress maintenance or security needs? Reach out!
TLDWP

Domain Security Report for v*a*z.com

Domain Information

WordPress Version: 7.0.2

Theme: flatsome (theme used by 145,323 domains)

Last Checked: 2026-07-23 16:15:42

HTTPS: Yes

Plugins (13)

Plugin Version Used By
advanced-coupons-for-woocommerce-free 4,980
ajax-search-for-woocommerce-premium 6,152
carousel-slider 3,496
duracelltomi-google-tag-manager 86,976
ithemeland-free-gifts-for-woocommerce 206
pixelyoursite 69,779
translatepress-multilingual 65,266
url-shortify 3,991
wc-kasikorn-k-pgw-gateway 25
webappick-product-feed-for-woocommerce 287
woocommerce 784,675
woocommerce-product-filters 1,444
wp-bottom-menu 2,081

Security Headers

C
Grade C

2 missing headers

Missing headers:

  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • Permissions-Policy — Limits browser features ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.