Domain Information
WordPress Version: 6.8.1 VULNERABLE
Theme: affinger (theme used by 4,440 domains)
Last Checked: 2026-09-07 01:46:59
HTTPS: Yes
Server: nginx
Response time (TTFB): 2,742 ms slow
Hosting: GMO Internet, Inc. (AS7506)
IP address: 118.27.122.xxx
Plugins (3)
| Plugin | Version | Used By |
|---|---|---|
| contact-form-7 | — | 1,707,342 |
| jetpack | — | 411,832 |
| word-balloon | — | 319 |
Security Headers
5 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (6.8.1) — unauthenticated SQL injection (CVE-2026-60137). Update to 6.8.6 immediately.
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.
Other WordPress domains on this IP (25+)
These WordPress domains are served from the same IP (118.27.122.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.
- a*-*o*a.com
- b*s*-*a*i*e*o*i*a*a.com
- b*a*e*e*o.com
- e*c*t*n*f*r*.com
- h*n*i*d*n*a*.com
- h*g*-*o*o.com
- h*k*r*-*l*.com
- h*k*r*-*e*r*i*.com
- h*k*r*-*e*r*c*-*c.com
- h*o*b*o*.com
- h*s*-*o*s*l*i*g.com
- k*k*y*s*s*m*l*g.com
- k*m*j*i*.com
- k*m*t*k*b*o*.com
- k*n*k*-*s*i*a*i.com
- k*n*n*a*h*k*.com
- k*n*a*b*o*.com
- k*k*n*i*u*i*o*o*o*e*e*-*u.com
- k*i*o*l*g.com
- k*k*r*g*5*.com
- k*n*w*t*f*n.com
- k*w*s*k*b*o*.com
- k*e*b*o*.com
- m*c*w*y*l*f*.com
- n*z*m*-*e*.com