WordPress maintenance or security needs? Reach out!
TLDWP

Domain Details for n*n*p*x*.c*m.br

Site Information

WordPress Version: 6.9.4 VULNERABLE

Theme: astra (used by 410,788 domains)

Last Checked: 2026-07-11 20:34:35

HTTPS: Yes

Plugins (5)

Plugin Used By
astra-sites 111,691
elementor 1,759,191
header-footer-elementor 204,642
premium-addons-for-elementor 83,246
sticky-menu-or-anything-on-scroll 18,676

Security Headers

F
Grade F

5 missing headers

Missing headers:

  • Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • X-Content-Type-Options — Prevents MIME sniffing ?
  • X-Frame-Options — Prevents clickjacking ?
  • Referrer-Policy — Controls referrer information ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • Vulnerable WordPress Version (6.9.4) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress site? Contact us for a professional security audit.

Top 50 Plugins

Plugin Count
elementor 1,759,185
contact-form-7 1,741,185
elementor-pro 1,046,675
woocommerce 812,177
revslider 603,397
jetpack 451,502
js_composer 415,802
wp-rocket 339,359
essential-addons-for-elementor-lite 262,633
gravityforms 255,536
complianz-gdpr 254,598
google-site-kit 233,738
cookie-law-info 226,526
instagram-feed 222,750
sitepress-multilingual-cms 208,639
header-footer-elementor 204,643
google-analytics-for-wordpress 203,261
bluehost-wordpress-plugin 191,943
elementskit-lite 178,282
gutenberg 168,029
cookie-notice 147,225
litespeed-cache 145,482
gtranslate 123,095
wpforms-lite 122,019
the-events-calendar 121,372
gutenberg-core 116,619
astra-sites 111,693
popup-maker 108,611
woocommerce-payments 108,410
tablepress 101,836
honeypot 97,579
astra-addon 93,097
coblocks 90,205
wp-smushit 89,969
duracelltomi-google-tag-manager 89,831
all-in-one-seo-pack 88,219
layerslider 88,161
bb-plugin 86,136
akismet 84,317
premium-addons-for-elementor 83,245
ml-slider 82,314
cleantalk-spam-protect 81,638
mailchimp-for-wp 80,742
megamenu 79,765
woocommerce-gateway-stripe 78,474
jet-engine 77,486
ewww-image-optimizer 76,892
fusion-builder 76,394
wp-pagenavi 76,390
smart-slider-3 75,393

Top 50 Themes

Theme Count
hello-elementor 617,402
Divi 491,331
astra 410,906
flatsome 142,220
Avada 119,956
generatepress 114,169
pub 81,393
oceanwp 79,634
kadence 78,019
enfold 67,995
salient 64,510
twentyseventeen 54,018
bb-theme 52,863
twentytwentyfour 52,693
betheme 52,231
blocksy 50,554
cocoon-master 49,387
twentytwentyfive 45,394
dt-the7 45,157
woodmart 44,391
h4 40,638
neve 37,769
Avada-Child-Theme 36,725
gox 36,268
bridge 30,902
lightning 30,203
twentytwentyone 30,017
twentytwenty 28,532
swell 28,384
bricks 26,547
Impreza 25,880
Newspaper 24,133
twentytwentythree 21,888
epik-redesign 19,020
twentytwentytwo 18,635
uncode 18,271
twentysixteen 17,602
pro 17,514
storefront 16,202
sydney 16,071
Total 14,218
hello-theme-child-master 13,962
factory-templates-4 13,708
themify-ultra 12,876
hestia 12,463
yootheme 12,438
extendable 12,118
yith-wonder 11,994
porto 11,857
twentyfifteen 11,800
Copyright 2026, tldwp.com. All rights reserved. WordPress maintenance or security needs? Reach out!