Domain Information
WordPress Version: Unknown
Theme: yootheme (theme used by 12,051 domains)
Last Checked: 2026-07-23 13:02:51
HTTPS: Yes
Plugins (14)
| Plugin | Version | Used By |
|---|---|---|
| cartasi-x-pay | — | 686 |
| country-base-restrictions-pro-addon | — | 78 |
| duracelltomi-google-tag-manager | — | 86,474 |
| etics-theme-core | — | 0 |
| etics-theme-css-override | — | 0 |
| forminator | — | 21,541 |
| google-listings-and-ads | — | 24,098 |
| if-menu | — | 9,407 |
| iubenda-cookie-law-solution | — | 3,203 |
| pixelyoursite | — | 69,437 |
| ti-woocommerce-wishlist | — | 9,575 |
| woocommerce | — | 781,569 |
| wordpress-popup | — | 7,033 |
| wp-google-map-gold | — | 2,285 |
Security Headers
B
Grade B
1 missing header
Missing headers:
- Content-Security-Policy (CSP) — Prevents XSS attacks ?
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.