WordPress maintenance or security needs? Reach out!
TLDWP

Domain Details for e*c*a*.org

Site Information

WordPress Version: 6.9.4 VULNERABLE

Theme: bb-theme (used by 53,313 domains)

Last Checked: 2026-07-01 02:16:22

HTTPS: Yes

Plugins (5)

Plugin Used By
bb-plugin 86,765
bluehost-wordpress-plugin 192,336
the-events-calendar 122,153
wp-stripe-donation-premium 27
wpforms-form-locker 2,752

Security Headers

F
Grade F

5 missing headers

Missing headers:

  • Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • X-Content-Type-Options — Prevents MIME sniffing ?
  • X-Frame-Options — Prevents clickjacking ?
  • Referrer-Policy — Controls referrer information ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • Vulnerable WordPress Version (6.9.4) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress site? Contact us for a professional security audit.

Top 50 Plugins

Plugin Count
elementor 1,769,738
contact-form-7 1,750,019
elementor-pro 1,052,318
woocommerce 816,083
revslider 608,174
jetpack 454,253
js_composer 419,462
wp-rocket 342,072
essential-addons-for-elementor-lite 264,474
gravityforms 256,971
complianz-gdpr 256,829
google-site-kit 232,692
cookie-law-info 227,951
instagram-feed 224,412
sitepress-multilingual-cms 210,495
header-footer-elementor 206,392
google-analytics-for-wordpress 205,267
bluehost-wordpress-plugin 192,336
elementskit-lite 179,938
gutenberg 167,258
cookie-notice 148,681
litespeed-cache 144,286
gtranslate 124,682
wpforms-lite 123,597
the-events-calendar 122,151
astra-sites 113,000
popup-maker 109,496
woocommerce-payments 109,134
gutenberg-core 103,135
tablepress 102,355
honeypot 97,683
astra-addon 93,681
wp-smushit 90,676
duracelltomi-google-tag-manager 90,306
layerslider 89,109
all-in-one-seo-pack 88,953
bb-plugin 86,764
coblocks 86,574
akismet 84,935
premium-addons-for-elementor 84,283
cleantalk-spam-protect 82,404
ml-slider 82,218
mailchimp-for-wp 81,621
megamenu 80,154
woocommerce-gateway-stripe 79,315
jet-engine 77,974
fusion-builder 76,959
ewww-image-optimizer 76,710
wp-pagenavi 76,468
smart-slider-3 76,031

Top 50 Themes

Theme Count
hello-elementor 620,549
Divi 495,252
astra 413,585
flatsome 138,863
Avada 120,846
generatepress 114,727
oceanwp 80,249
kadence 78,675
pub 72,288
enfold 68,653
salient 65,076
twentyseventeen 54,233
bb-theme 53,298
betheme 52,380
twentytwentyfour 52,224
blocksy 50,776
cocoon-master 49,220
dt-the7 45,396
twentytwentyfive 44,960
woodmart 43,648
neve 38,051
Avada-Child-Theme 36,890
gox 36,274
h4 36,036
bridge 31,244
twentytwentyone 30,245
lightning 29,978
twentytwenty 28,726
swell 27,995
bricks 26,483
Impreza 26,050
Newspaper 24,180
twentytwentythree 22,091
epik-redesign 19,111
twentytwentytwo 18,753
uncode 18,469
pro 17,618
twentysixteen 17,592
sydney 16,417
storefront 16,284
Total 14,356
hello-theme-child-master 14,016
factory-templates-4 13,734
themify-ultra 12,921
extendable 12,698
hestia 12,570
yootheme 12,470
yith-wonder 12,084
porto 11,950
twentyfifteen 11,853
Copyright 2026, tldwp.com. All rights reserved. WordPress maintenance or security needs? Reach out!