WordPress maintenance or security needs? Reach out!

TLDWP

Domain Security Report for lvbts.co

Domain Information

WordPress Version: 7.1

Theme: gwangi (used by 29 domains)

Last Checked: 2026-09-03 23:44:21

HTTPS: Yes

Plugins (17)

Plugin	Used By
bbpress	13,306
bp-member-swipe	23
bp-verified-member	237
buddypress	6,224
buddypress-media	838
elementor	1,713,799
elementor-pro	1,021,839
grimlock	141
grimlock-animate	124
grimlock-author-avatars	64
grimlock-bbpress	57
grimlock-buddypress	61
grimlock-elementor	34
grimlock-login	103
menu-image	23,201
super-progressive-web-apps	5,892
wp-hooks-finder	222

Security Headers

F

Grade F

5 missing headers

Missing headers:

Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
Content-Security-Policy (CSP) — Prevents XSS attacks ?
X-Content-Type-Options — Prevents MIME sniffing ?
X-Frame-Options — Prevents clickjacking ?
Referrer-Policy — Controls referrer information ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.