Site Information
WordPress Version: 6.4.3 ⚠️ VULNERABLE
Theme: kriya-child (used by 5 domains)
Last Checked: 2026-05-29 00:56:07
HTTPS: ✅ Yes
Plugins (14)
| Plugin | Used By |
|---|---|
| buddypress | 7,200 |
| contact-form-7 | 1,724,227 |
| designthemes-core-features | 3,006 |
| drag-and-drop-multiple-file-upload-contact-form-7 | 11,528 |
| events-calendar-pro | 29,309 |
| js_composer | 422,273 |
| paid-memberships-pro | 10,763 |
| pmpro-mailchimp | 894 |
| revslider | 604,277 |
| sangha-register | 0 |
| wp-mmtcp | 0 |
| wp-ulike | 7,575 |
| youzify | 715 |
| youzify-edit-activity | 42 |
Security Headers
B
Grade B
1 missing header
Missing Headers:
- Content-Security-Policy (CSP) — Prevents XSS attacks ?
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.4.3) — CVE-2024-4439: Unauthenticated Stored XSS. Update to 6.5.2 or later immediately.
Need help securing your WordPress site? Contact us for a professional security audit.