Domain Information
WordPress Version: 6.8.3 VULNERABLE
Theme: leighorange
Last Checked: 2026-09-05 19:43:25
HTTPS: Yes
Server: nginx
Response time (TTFB): 1,823 ms slow
Hosting: PCCW IMS Ltd (PCCW Business Internet Access) (AS4515)
IP address: 210.177.229.xxx
Plugins (8)
| Plugin | Used By |
|---|---|
| back-to-the-top-button | 808 |
| hover-effects | 1,391 |
| js_composer | 405,963 |
| mystickymenu | 16,868 |
| revslider | 588,868 |
| search-filter | 13,756 |
| sitepress-multilingual-cms | 206,013 |
| wp-responsive-menu-old | 0 |
Security Headers
2 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.8.3) — unauthenticated SQL injection (CVE-2026-60137). Update to 6.8.6 immediately.
- info.php exposed — Server configuration publicly visible ?
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.