WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Domain Details for l*f*r*a*a.es

Site Information

WordPress Version: 7.0 VULNERABLE

Theme: neve (used by 38,124 domains)

Last Checked: 2026-06-13 04:23:11

HTTPS: Yes

Plugins (8)

Plugin Used By
cryout-serious-slider 3,549
facebook-page-feed-graph-api 904
forminator 22,652
instagram-widget-by-wpzoom 6,027
optimole-wp 2,899
otter-blocks 14,595
photonic 3,099
simple-lightbox 29,405

Security Headers

F
Grade F

5 missing headers

Missing headers:

  • Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • X-Content-Type-Options — Prevents MIME sniffing ?
  • X-Frame-Options — Prevents clickjacking ?
  • Referrer-Policy — Controls referrer information ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • Vulnerable WordPress Version (7.0) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 7.0.2 immediately.
  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress site? Contact us for a professional security audit.

Top 50 Plugins

Plugin Count
elementor 1,769,947
contact-form-7 1,751,151
elementor-pro 1,052,329
woocommerce 816,084
revslider 608,676
jetpack 454,679
js_composer 419,902
wp-rocket 342,079
essential-addons-for-elementor-lite 264,695
gravityforms 257,300
complianz-gdpr 257,186
google-site-kit 232,602
cookie-law-info 228,240
instagram-feed 224,724
sitepress-multilingual-cms 210,596
header-footer-elementor 206,656
google-analytics-for-wordpress 205,675
bluehost-wordpress-plugin 192,331
elementskit-lite 180,017
gutenberg 167,120
cookie-notice 148,816
litespeed-cache 143,825
gtranslate 124,781
wpforms-lite 123,738
the-events-calendar 122,341
astra-sites 113,144
popup-maker 109,698
woocommerce-payments 109,299
gutenberg-core 103,141
tablepress 102,135
honeypot 97,728
astra-addon 93,740
wp-smushit 90,814
duracelltomi-google-tag-manager 90,306
layerslider 89,283
all-in-one-seo-pack 89,071
bb-plugin 86,901
coblocks 86,693
akismet 84,979
premium-addons-for-elementor 84,367
cleantalk-spam-protect 82,573
ml-slider 81,991
mailchimp-for-wp 81,773
megamenu 80,196
woocommerce-gateway-stripe 79,441
jet-engine 77,892
fusion-builder 77,057
ewww-image-optimizer 76,627
wp-pagenavi 76,457
smart-slider-3 76,121

Top 50 Themes

Theme Count
hello-elementor 620,749
Divi 496,071
astra 413,940
flatsome 138,152
Avada 120,987
generatepress 114,820
oceanwp 80,309
kadence 78,841
pub 72,283
enfold 68,738
salient 65,153
twentyseventeen 54,318
bb-theme 53,400
betheme 52,414
twentytwentyfour 52,234
blocksy 50,827
cocoon-master 49,206
dt-the7 45,445
twentytwentyfive 44,937
woodmart 43,254
neve 38,122
Avada-Child-Theme 36,904
gox 36,229
h4 36,037
bridge 31,326
twentytwentyone 30,291
lightning 29,946
twentytwenty 28,762
swell 27,969
bricks 26,481
Impreza 26,076
Newspaper 24,176
twentytwentythree 22,095
epik-redesign 19,143
twentytwentytwo 18,767
uncode 18,501
pro 17,626
twentysixteen 17,602
sydney 16,502
storefront 16,314
Total 14,390
hello-theme-child-master 14,021
factory-templates-4 13,731
themify-ultra 12,948
extendable 12,765
hestia 12,582
yootheme 12,515
yith-wonder 12,108
porto 11,949
twentyfifteen 11,874
Copyright 2026, tldwp.com. All rights reserved. WordPress OSINT or security needs? Reach out!