WordPress maintenance or security needs? Reach out!
TLDWP

Domain Security Report for f*i*t*p*r*s.com

Domain Information

WordPress Version: 7.0 VULNERABLE

Theme: salient (theme used by 61,633 domains)

Last Checked: 2026-07-21 16:42:28

HTTPS: Yes

Plugins (14)

Plugin Version Used By
cookie-law-info 218,086
easy-sale-badges-for-woocommerce 676
facebook-for-woocommerce 25,460
js_composer_salient 64,644
mailchimp-for-woocommerce 42,146
official-facebook-pixel 37,752
salient-core 59,698
salient-portfolio 40,791
say-what 6,801
woocommerce 776,792
woocommerce-gateway-stripe 55,553
woocommerce-payments 100,053
woocommerce-paypal-payments 32,218
wpc-product-options 327

Security Headers

F
Grade F

5 missing headers

Missing headers:

  • Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • X-Content-Type-Options — Prevents MIME sniffing ?
  • X-Frame-Options — Prevents clickjacking ?
  • Referrer-Policy — Controls referrer information ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • Vulnerable WordPress Version (7.0) — wp2shell unauthenticated RCE (CVE-2026-63030). Update to 7.0.2 immediately.
  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.