WordPress maintenance or security needs? Reach out!
TLDWP

Domain Security Report for y*d*n*.org

Domain Information

WordPress Version: 6.9.4 VULNERABLE

Theme: kava (used by 4,633 domains)

Last Checked: 2026-07-20 14:42:27

HTTPS: Yes

Plugins (17)

Plugin Used By
booked 8,797
contact-form-7 1,711,818
elementor 1,713,799
elementor-pro 1,021,839
elementskit-lite 172,072
google-site-kit 256,873
jet-blocks 22,685
jet-blog 15,151
jet-elements 63,211
jet-menu 28,121
jet-popup 16,492
jet-tabs 32,350
jet-tricks 21,622
kava-extra-master 10
liqpay_wordpress 18
wp-consent-api 52,536
wpgsi 327

Security Headers

F
Grade F

5 missing headers

Missing headers:

  • Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • X-Content-Type-Options — Prevents MIME sniffing ?
  • X-Frame-Options — Prevents clickjacking ?
  • Referrer-Policy — Controls referrer information ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • Vulnerable WordPress Version (6.9.4) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.

Top 50 Plugins

Plugin Count
elementor 1,713,799
contact-form-7 1,711,818
elementor-pro 1,021,839
woocommerce 791,879
revslider 588,279
jetpack 416,614
js_composer 405,640
wp-rocket 322,099
google-site-kit 256,873
essential-addons-for-elementor-lite 254,810
gravityforms 251,328
complianz-gdpr 250,836
cookie-law-info 222,031
instagram-feed 218,355
sitepress-multilingual-cms 205,949
header-footer-elementor 198,087
google-analytics-for-wordpress 197,258
bluehost-wordpress-plugin 188,361
elementskit-lite 172,072
gutenberg 146,899
litespeed-cache 144,694
cookie-notice 143,627
gutenberg-core 126,366
gtranslate 119,995
the-events-calendar 119,367
wpforms-lite 116,930
astra-sites 107,145
popup-maker 106,077
woocommerce-payments 103,265
tablepress 101,314
honeypot 95,919
astra-addon 90,784
duracelltomi-google-tag-manager 87,888
wp-smushit 87,560
coblocks 86,474
layerslider 85,968
all-in-one-seo-pack 85,502
bb-plugin 84,419
ml-slider 81,902
akismet 80,643
cleantalk-spam-protect 79,760
premium-addons-for-elementor 79,662
megamenu 78,399
mailchimp-for-wp 78,087
ewww-image-optimizer 76,598
wp-pagenavi 76,385
jet-engine 76,048
fusion-builder 75,058
smart-slider-3 73,869
gravityformsrecaptcha 72,665

Top 50 Themes

Theme Count
hello-elementor 604,726
Divi 479,817
astra 398,094
flatsome 146,400
Avada 117,757
generatepress 111,567
pub 87,219
oceanwp 77,376
kadence 77,157
enfold 66,496
salient 63,036
twentyseventeen 52,564
bb-theme 51,530
betheme 51,137
twentytwentyfour 51,095
cocoon-master 49,768
blocksy 49,260
twentytwentyfive 45,875
woodmart 44,738
dt-the7 44,235
h4 43,872
neve 36,779
Avada-Child-Theme 36,335
gox 35,794
lightning 30,838
bridge 30,172
swell 29,175
twentytwentyone 29,107
twentytwenty 27,766
bricks 26,847
Impreza 25,372
Newspaper 23,435
twentytwentythree 21,073
epik-redesign 18,815
twentytwentytwo 17,955
uncode 17,933
twentysixteen 17,154
pro 17,047
sydney 15,664
storefront 15,531
Total 14,038
factory-templates-4 13,918
hello-theme-child-master 13,515
themify-ultra 13,135
hestia 12,219
yootheme 12,218
yith-wonder 11,642
jupiter 11,544
twentyfifteen 11,489
porto 11,468
Copyright 2026, tldwp.com. All rights reserved. WordPress maintenance or security needs? Reach out!