Domain Information
WordPress Version: 6.4.2 VULNERABLE
Theme: ewebot (theme used by 861 domains)
Last Checked: 2026-07-20 18:32:45
HTTPS: Yes
Plugins (15)
| Plugin | Version | Used By |
|---|---|---|
| afl-wc-utm | — | 3,413 |
| elementor | — | 1,707,286 |
| elementor-pro | — | 1,017,560 |
| essential-addons-for-elementor-lite | — | 253,648 |
| gt3-themes-core | — | 1,263 |
| gtranslate | — | 119,614 |
| miniorange-otp-verification | — | 557 |
| pixelyoursite | — | 70,333 |
| premium-addons-for-elementor | — | 79,201 |
| simply-schedule-appointments | — | 7,407 |
| woo-payment-gateway | — | 75 |
| woocommerce | — | 789,108 |
| wp-store-locator | — | 16,762 |
| wpda-builder-pro | — | 868 |
| wt-smart-coupon-pro | — | 814 |
Security Headers
D
Grade D
3 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.4.2) — outdated core with known vulnerabilities. Update to the latest release immediately.
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.