Domain Information
WordPress Version: Unknown
Theme: oceanwp (theme used by 76,442 domains)
Last Checked: 2026-08-26 14:06:42
HTTPS: Yes
Plugins (19)
| Plugin | Version | Used By |
|---|---|---|
| ai-disclosure-block | — | 0 |
| content-views-query-and-display-post-page | — | 26,627 |
| effi-share-buttons-main | — | 116 |
| elementor | — | 1,689,719 |
| google-analytics-dashboard-for-wp | — | 24,739 |
| google-calendar-events | — | 5,145 |
| hcaptcha-for-forms-and-more | — | 20,409 |
| image-ticker-carousel | — | 69 |
| mystickyelements | — | 4,595 |
| ocean-extra | — | 52,969 |
| ocean-social-sharing | — | 7,213 |
| off-canvas-sidebars | — | 190 |
| pdf-embedder | — | 14,006 |
| safe-svg | — | 44,476 |
| sidemenu | — | 201 |
| sticky-menu-or-anything-on-scroll | — | 18,156 |
| transparence-ia | — | 0 |
| wp-gdpr-compliance | — | 12,052 |
| wp-popups-lite | — | 9,211 |
Security Headers
B
Grade B
1 missing header
Missing headers:
- Content-Security-Policy (CSP) — Prevents XSS attacks ?
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.