WordPress maintenance or security needs? Reach out!
TLDWP

Domain Security Report for g*a*e*i*.com

Domain Information

WordPress Version: 7.1

Theme: kava-child (theme used by 264 domains)

Last Checked: 2026-08-25 05:30:19

HTTPS: Yes

Plugins (14)

Plugin Version Used By
cf7-multi-step 3,018
drag-and-drop-multiple-file-upload-contact-form-7 11,116
elementor 1,678,767
hcaptcha-for-forms-and-more 20,300
ht-slider-for-elementor 2,303
instagram-feed-pro 30,977
interactive-geo-maps-premium 923
jet-blocks 22,252
jet-blog 14,844
jet-elements 61,841
jet-menu 27,439
jet-reviews 2,618
jet-tabs 31,598
jet-theme-core 11,003

Security Headers

D
Grade D

3 missing headers

Missing headers:

  • Strict-Transport-Security (HSTS) — Forces HTTPS connections ?
  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • Permissions-Policy — Limits browser features ?

Exposed Files & Configurations

This domain has publicly accessible security-sensitive files or configurations:

  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.