WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Domain Details for v*l*a*a*d*.shop

Site Information

WordPress Version: 6.9.4 VULNERABLE

Theme: xstore (used by 3,732 domains)

Last Checked: 2026-08-27 09:18:16

HTTPS: Yes

Plugins (8)

Plugin Used By
click-to-chat-for-whatsapp 58,285
elementor 1,727,235
essential-addons-for-elementor-lite 257,059
instagram-feed 219,598
pro-elements 61,549
sitepress-multilingual-cms 206,335
woocommerce 797,773
woocommerce-multilingual 25,844

Security Headers

D
Grade D

4 missing headers

Missing headers:

  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • X-Frame-Options — Prevents clickjacking ?
  • Referrer-Policy — Controls referrer information ?
  • Permissions-Policy — Limits browser features ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • Vulnerable WordPress Version (6.9.4) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress site? Contact us for a professional security audit.

Top 50 Plugins

Plugin Count
elementor 1,727,226
contact-form-7 1,719,352
elementor-pro 1,028,902
woocommerce 797,771
revslider 591,142
jetpack 429,986
js_composer 407,797
wp-rocket 325,592
essential-addons-for-elementor-lite 257,055
gravityforms 252,205
google-site-kit 252,083
complianz-gdpr 251,842
cookie-law-info 223,076
instagram-feed 219,598
sitepress-multilingual-cms 206,336
header-footer-elementor 200,102
google-analytics-for-wordpress 198,850
bluehost-wordpress-plugin 189,410
elementskit-lite 173,844
gutenberg 157,637
litespeed-cache 145,316
cookie-notice 144,385
gutenberg-core 138,323
gtranslate 120,731
the-events-calendar 120,207
wpforms-lite 118,259
astra-sites 108,546
popup-maker 106,733
woocommerce-payments 105,151
tablepress 101,208
honeypot 96,402
coblocks 92,364
astra-addon 91,298
duracelltomi-google-tag-manager 88,273
wp-smushit 88,197
layerslider 86,406
all-in-one-seo-pack 86,193
bb-plugin 84,772
ml-slider 82,144
akismet 81,849
premium-addons-for-elementor 80,546
cleantalk-spam-protect 80,198
mailchimp-for-wp 78,714
megamenu 78,644
ewww-image-optimizer 76,811
wp-pagenavi 76,500
jet-engine 76,456
fusion-builder 75,370
smart-slider-3 74,262
gravityformsrecaptcha 72,802

Top 50 Themes

Theme Count
hello-elementor 608,717
Divi 482,775
astra 401,768
flatsome 145,406
Avada 118,318
generatepress 112,137
pub 95,660
oceanwp 77,960
kadence 77,621
enfold 66,901
salient 63,294
twentyseventeen 52,931
bb-theme 51,759
twentytwentyfour 51,690
betheme 51,447
cocoon-master 49,902
blocksy 49,691
h4 48,094
twentytwentyfive 45,723
woodmart 44,946
dt-the7 44,417
neve 37,022
Avada-Child-Theme 36,426
gox 35,880
lightning 30,789
bridge 30,311
twentytwentyone 29,362
swell 29,194
twentytwenty 27,983
bricks 26,807
Impreza 25,490
Newspaper 23,611
twentytwentythree 21,308
epik-redesign 18,836
twentytwentytwo 18,148
uncode 18,002
twentysixteen 17,270
pro 17,152
sydney 15,733
storefront 15,679
Total 14,079
factory-templates-4 13,887
hello-theme-child-master 13,646
themify-ultra 12,704
hestia 12,274
yootheme 12,251
yith-wonder 11,698
jupiter 11,584
porto 11,522
twentyfifteen 11,510
Copyright 2026, tldwp.com. All rights reserved. WordPress maintenance or security needs? Reach out!