WordPress maintenance or security needs? Reach out!
TLDWP

Domain Security Report for m*l*m.pl

Domain Information

WordPress Version: 6.9.7

Theme: storefront 4.6.2· 100% conf. (theme used by 15,359 domains)

Last Checked: 2026-09-09 04:49:40

HTTPS: Yes

Server: nginx

Response time (TTFB): 640 ms

Hosting: OVH SAS (AS16276)

IP address: 146.59.69.xxx

Plugins (19)

Plugin Version Used By
contact-form-7 6.1.6· 85% conf. 1,698,348
facebook-for-woocommerce 3.5.18· 60% conf. 25,761
flexible-shipping 6.5.7.2· 60% conf. 19,474
gdpr-cookie-compliance 5.1.0· 85% conf. 65,983
google-listings-and-ads 24,205
official-mailerlite-sign-up-forms 1.7.26· 60% conf. 17,633
product-gtin-ean-upc-isbn-for-woocommerce 1.1.1· 60% conf. 544
slider-wd 1.2.62· 85% conf. 3,325
variation-swatches-for-woocommerce 2.2.6· 85% conf. 4,015
woo-payu-payment-gateway 2.9.1· 85% conf. 1,891
woocommerce 10.5.2· 85% conf. 783,975
woocommerce-cart-tab 1.1.2· 85% conf. 593
woocommerce-dpd 304
woocommerce-google-analytics-integration 27,196
woocommerce-paczka-w-ruchu 93
woocommerce-paczkomaty-inpost 497
woocommerce-product-bundles 7.0.2· 85% conf. 8,190
woocommerce-products-filter 3.3.0· 85% conf. 11,251
yith-woocommerce-waiting-list 2.33.0· 85% conf. 394

Security Headers

F
Grade F

6 missing headers

Missing headers:

  • Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • X-Content-Type-Options — Prevents MIME sniffing ?
  • X-Frame-Options — Prevents clickjacking ?
  • Referrer-Policy — Controls referrer information ?
  • Permissions-Policy — Limits browser features ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.