WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Domain Details for n*f*f*a*f*o*b*l*.org

Site Information

WordPress Version: 7.0 VULNERABLE

Theme: ncfa

Last Checked: 2026-06-06 22:48:34

HTTPS: Yes

Plugins (6)

Plugin Used By
adrotate-pro 2,399
collclubsports 5
contact-form-7 1,754,711
google-site-kit 232,617
widgets-on-pages 2,350
wp-paginate 5,603

Security Headers

F
Grade F

5 missing headers

Missing headers:

  • Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • X-Content-Type-Options — Prevents MIME sniffing ?
  • X-Frame-Options — Prevents clickjacking ?
  • Permissions-Policy — Limits browser features ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • Vulnerable WordPress Version (7.0) — CVE-2026-63030: Unauthenticated RCE (wp2shell). Update to 7.0.2 or later immediately.
  • debug.log exposed — WordPress errors publicly visible ?

Need help securing your WordPress site? Contact us for a professional security audit.

Top 50 Plugins

Plugin Count
elementor 1,773,066
contact-form-7 1,754,699
elementor-pro 1,053,398
woocommerce 816,868
revslider 609,950
jetpack 456,151
js_composer 420,819
wp-rocket 341,566
essential-addons-for-elementor-lite 265,266
complianz-gdpr 257,980
gravityforms 257,686
google-site-kit 232,621
cookie-law-info 228,902
instagram-feed 225,266
sitepress-multilingual-cms 210,874
header-footer-elementor 207,407
google-analytics-for-wordpress 206,188
bluehost-wordpress-plugin 192,588
elementskit-lite 180,622
gutenberg 167,311
cookie-notice 149,235
litespeed-cache 143,547
gtranslate 125,193
wpforms-lite 124,272
the-events-calendar 122,579
astra-sites 113,631
gutenberg-core 113,508
popup-maker 110,000
woocommerce-payments 109,709
tablepress 102,202
honeypot 97,891
astra-addon 93,947
wp-smushit 91,090
duracelltomi-google-tag-manager 90,451
coblocks 89,789
layerslider 89,525
all-in-one-seo-pack 89,300
bb-plugin 87,066
akismet 85,166
premium-addons-for-elementor 84,433
ml-slider 83,034
cleantalk-spam-protect 82,813
mailchimp-for-wp 82,012
megamenu 80,374
woocommerce-gateway-stripe 79,700
jet-engine 77,827
fusion-builder 77,281
ewww-image-optimizer 76,638
wp-pagenavi 76,523
smart-slider-3 76,327

Top 50 Themes

Theme Count
hello-elementor 621,543
Divi 497,327
astra 415,116
flatsome 137,795
Avada 121,363
generatepress 114,678
oceanwp 80,569
pub 79,286
kadence 78,818
enfold 68,928
salient 65,362
twentyseventeen 54,403
bb-theme 53,484
betheme 52,451
twentytwentyfour 52,191
blocksy 51,007
cocoon-master 49,241
dt-the7 45,528
twentytwentyfive 44,925
woodmart 42,693
h4 39,561
neve 38,220
Avada-Child-Theme 36,954
gox 36,252
bridge 31,437
twentytwentyone 30,343
lightning 29,939
twentytwenty 28,835
swell 27,982
bricks 26,516
Impreza 26,104
Newspaper 24,234
twentytwentythree 22,139
epik-redesign 19,181
twentytwentytwo 18,831
uncode 18,592
twentysixteen 17,623
pro 17,621
sydney 16,585
storefront 16,374
Total 14,410
hello-theme-child-master 14,004
factory-templates-4 13,730
themify-ultra 12,971
extendable 12,866
hestia 12,599
yootheme 12,547
yith-wonder 12,223
porto 11,980
twentyfifteen 11,835
Copyright 2026, tldwp.com. All rights reserved. WordPress OSINT or security needs? Reach out!