Domain Information
WordPress Version: 6.9.4 VULNERABLE
Theme: bacola-child (used by 13 domains)
Last Checked: 2026-09-05 18:12:22
HTTPS: Yes
Server: nginx
Response time (TTFB): 579 ms
Hosting: InMotion Hosting, Inc. (AS54641)
IP address: 199.250.194.xxx
Plugins (9)
| Plugin | Used By |
|---|---|
| ajax-search-for-woocommerce | 20,881 |
| bacola-core | 96 |
| contact-form-7 | 1,717,556 |
| elementor | 1,722,365 |
| mailchimp-for-wp | 78,462 |
| ti-woocommerce-wishlist | 9,785 |
| w3-total-cache | 38,084 |
| woo-variation-swatches | 31,083 |
| woocommerce | 795,651 |
Security Headers
5 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.9.4) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 6.9.5 immediately.
Need help securing your WordPress infrastructure? Contact us for a professional security audit.
Other WordPress domains on this IP (13)
These WordPress domains are served from the same IP (199.250.194.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.