Site Information
WordPress Version: 6.9.4 VULNERABLE
Theme: startit (used by 866 domains)
Last Checked: 2026-07-15 18:32:26
HTTPS: Yes
Plugins (12)
| Plugin | Used By |
|---|---|
| google-analytics-dashboard-for-wp | 25,337 |
| google-analytics-for-wordpress | 198,854 |
| instagram-feed | 219,598 |
| js_composer | 407,797 |
| layerslider | 86,404 |
| meks-smart-social-widget | 3,680 |
| mpc-massive | 3,350 |
| onesignal-free-web-push-notifications | 15,095 |
| popup-builder | 12,386 |
| tablepress | 101,206 |
| wp-statistics | 55,814 |
| wp-whatsapp | 15,221 |
Security Headers
D
Grade D
4 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.9.4) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
Need help securing your WordPress site? Contact us for a professional security audit.