Site Information
WordPress Version: 6.9.4 ✓
Theme: catch-kathmandu (used by 211 domains)
Last Checked: 2026-06-09 03:06:51
HTTPS: ✅ Yes
Plugins (12)
| Plugin | Used By |
|---|---|
| custom-facebook-feed | 42,139 |
| elementor | 1,791,341 |
| formidable | 77,733 |
| header-footer-elementor | 209,152 |
| ht-mega-for-elementor | 9,958 |
| jquery-collapse-o-matic | 9,620 |
| mailchimp-for-wp | 83,341 |
| premium-addons-for-elementor | 86,472 |
| the-events-calendar | 130,614 |
| waves | 40 |
| wp-event-aggregator | 638 |
| wp-latest-posts | 2,250 |
Security Headers
D
Grade D
4 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress site? Contact us for a professional security audit.