Domain Information
WordPress Version: 7.0 VULNERABLE
Theme: aventura 1.8.6· 100% conf. (theme used by 38 domains)
Last Checked: 2026-09-09 07:45:13
HTTPS: Yes
Response time (TTFB): 1,219 ms slow
Hosting: OVH SAS (AS16276)
IP address: 46.105.204.xxx
PHP version: 7.4 — end-of-life, no security updates
Plugins (14)
| Plugin | Version | Used By |
|---|---|---|
| aventura-plugin | — | 39 |
| complianz-gdpr | — | 246,451 |
| content-views-query-and-display-post-page | 4.4· 60% conf. | 26,447 |
| easy-facebook-likebox | 6.7.2· 85% conf. | 6,593 |
| email-encoder-bundle | — | 19,255 |
| fluentform | 6.2.4· 85% conf. | 56,121 |
| fv-wordpress-flowplayer | 7.5.50.7212· 85% conf. | 813 |
| google-site-kit | — | 259,669 |
| gtranslate | — | 117,562 |
| js_composer | 8.6.1· 85% conf. | 398,232 |
| shortcodes-ultimate | 7.5.3· 60% conf. | 19,182 |
| tz-instagram-widget | — | 14 |
| wp-consent-api | 2.0.1· 60% conf. | 51,351 |
| wp-smushit | 4.0.3· 60% conf. | 85,646 |
Security Headers
6 missing headers
Missing headers:
- Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
- Content-Security-Policy (CSP) — Prevents XSS attacks ?
- X-Content-Type-Options — Prevents MIME sniffing ?
- X-Frame-Options — Prevents clickjacking ?
- Referrer-Policy — Controls referrer information ?
- Permissions-Policy — Limits browser features ?
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (7.0) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 7.0.2 immediately.
Need help securing your WordPress infrastructure? Contact us for a professional security audit.
Other WordPress domains on this IP (25+)
These WordPress domains are served from the same IP (46.105.204.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.
- a*e*-*a*i*c*n*e*t*o*n*-*o*l*u*e.fr
- a*b*s*e*e*a*i*n*l*.org
- a*l*u*d*r*n*e.fr
- a*n*s*-*o*f*.com
- a*o*r*.com
- a*t*d*t*.com
- a*p*n*e*n*t*o*a*.com
- a*m*m*n*i*e*i*s.com
- a*r*s*l*b*p.com
- a*r*s*e*b*p.com
- a*u*f*r*s*.fr
- a*c*a*e*u*e*e*f*n*s.fr
- b*e*s*r.co
- b*n*e*a*-*l*m*e*i*.fr
- b*r*h*n*o*o.com
- b*a*s*u*-*a*i*.com
- b*e*a*n*h*b*t*t*o*-*o*s*r*c*i*n.com
- b*i*o*a*e*m*t*r*a*x.com
- b*o*e*g*a*.com
- b*o*h*r*w*n*c*m*a*y.com
- b*u*s*y*.com
- b*d*i*m*.com
- c*r*o*s*l*g*u*m*t.fr
- c*m*r*s*c*a*.it
- d*m*e*-*a*q*i*r*e*v*g*e*.com