Site Information
WordPress Version: 6.9.4 VULNERABLE
Theme: HighendWP (used by 3,749 domains)
Last Checked: 2026-08-26 02:40:31
HTTPS: Yes
Plugins (16)
| Plugin | Used By |
|---|---|
| agile-store-locator | 4,954 |
| bg-showhide-plus-faq | 30 |
| contact-form-7 | 1,718,970 |
| essential-grid | 33,841 |
| feed-them-social | 2,900 |
| floating-social-media-icon | 1,646 |
| hcaptcha-for-forms-and-more | 20,757 |
| js_composer | 407,503 |
| mod_wordpress_magicthumb | 10 |
| recent-posts-widget-extended | 1,630 |
| revslider | 591,488 |
| ultimate_vc_addons | 53,862 |
| vcmegapack | 70 |
| video-background | 2,373 |
| wonderplugin-video-embed | 1,094 |
| wp-store-locator | 16,940 |
Security Headers
D
Grade D
4 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.9.4) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
Need help securing your WordPress site? Contact us for a professional security audit.