Site Information
WordPress Version: 5.5.18 VULNERABLE
Theme: wm (used by 36 domains)
Last Checked: 2026-07-28 05:15:03
HTTPS: Yes
Plugins (12)
| Plugin | Used By |
|---|---|
| attachment-file-icons | 39 |
| bp-activity-social-share | 42 |
| contact-form-7 | 1,731,488 |
| cookie-notice | 145,649 |
| newsletter | 46,340 |
| qtranslate-slug | 599 |
| qtranslate-x | 5,860 |
| the-post-grid | 14,336 |
| tlp-partners | 0 |
| tlp-portfolio | 1,335 |
| tlp-team | 2,620 |
| wen-map-marker | 6 |
Security Headers
D
Grade D
3 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (5.5.18) — outdated core with known vulnerabilities. Update to the latest release immediately.
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress site? Contact us for a professional security audit.