WordPress maintenance or security needs? Reach out!
TLDWP

Domain Security Report for z*a*e*.com

Domain Information

WordPress Version: Unknown

Theme: devkit-parallax

Last Checked: 2026-09-03 20:07:00

HTTPS: Yes

Plugins (26)

Plugin Used By
advanced-woo-search 10,415
block-options 5,353
blox-lite 124
ditty-news-ticker 8,175
elasticpress 3,828
featured-videos-for-genesis 73
genesis-custom-headers 260
genesis-page-builder 4,150
genesis-responsive-slider 5,612
genesis-tabs 414
genesis-widget-background 21
iks-menu 1,216
instant-ide-manager 76
jetpack 416,614
mailchimp-for-woocommerce 43,261
multipurpose-block 47
simple-social-icons 34,817
simple-urls 810
woocommerce 791,879
wp-opening-hours 909
yith-product-shipping-for-woocommerce-premium 139
yith-woocommerce-badge-management-premium 950
yith-woocommerce-brands-add-on-premium 515
yith-woocommerce-color-label-variations-premium 492
yith-woocommerce-dynamic-pricing-and-discounts-premium 1,508
yith-woocommerce-membership-premium 450

Security Headers

F
Grade F

5 missing headers

Missing headers:

  • Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • X-Content-Type-Options — Prevents MIME sniffing ?
  • X-Frame-Options — Prevents clickjacking ?
  • Referrer-Policy — Controls referrer information ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.