Domain Security Report: k*i*p*i*h*m*a.se

Domain Information

WordPress Version: 6.8.2 VULNERABLE

Theme: shoptimizer-child 1.0.1· 100% conf. (theme used by 81 domains)

Last Checked: 2026-09-09 18:33:40

HTTPS: Yes

Server: cloudflare

CDN / WAF: Cloudflare

Response time (TTFB): 611 ms

Hosting: Cloudflare, Inc. (AS13335)

IP address: 188.114.97.xxx

Plugin	Version	Used By
commercegurus-commercekit	2.1.1· 85% conf.	2,906
duracelltomi-google-tag-manager	1.22.3· 85% conf.	87,509
ean-for-woocommerce	5.5.2· 60% conf.	1,781
elementor	3.31.2· 85% conf.	1,707,286
elementor-pro	3.30.0· 85% conf.	1,017,560
hg-typesense-header-search	1.4.29· 85% conf.	0
jetpack	15.6· 60% conf.	411,832
klaviyo	3.7.3· 60% conf.	9,110
matching-products	—	0
pixel-manager-pro-for-woocommerce	1.58.9· 85% conf.	1,172
powerpack-elements	2.12.10· 85% conf.	14,778
profitmetrics	3.4.8· 60% conf.	127
search-with-typesense	—	186
typesense-search-for-woocommerce	1.8.0· 85% conf.	25
woocommerce-product-addons	7.9.2· 85% conf.	10,337
woocommerce-product-bundles	8.4.2· 85% conf.	8,323
yaypricing-pro	3.5.3· 85% conf.	166
yith-infinite-scrolling	2.6.0· 85% conf.	1,835

Grade F

6 missing headers

This domain has publicly accessible security-sensitive files or configurations:

Vulnerable WordPress Version (6.8.2) — unauthenticated SQL injection (CVE-2026-60137). Update to 6.8.6 immediately.
info.php exposed — Server configuration publicly visible ?
User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.

These WordPress domains are served from the same IP (188.114.97.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.