Domain Security Report: k*o*d*n*v*.com

Domain Information

WordPress Version: 6.8.3 VULNERABLE

Theme: lestin 1.1.1· 100% conf. (theme used by 50 domains)

Last Checked: 2026-09-10 08:26:34

HTTPS: Yes

Server: LiteSpeed

Response time (TTFB): 1,068 ms slow

Hosting: GMO Internet, Inc. (AS7506)

IP address: 163.44.185.xxx

PHP version: 8.3.33

Plugin	Version	Used By
addon-elements-for-elementor-page-builder	1.13.10· 85% conf.	15,786
chatbot	6.0.6· 85% conf.	771
contact-form-7	6.0.1· 85% conf.	1,698,348
content-views-query-and-display-post-page	4.0.2· 85% conf.	26,733
elementor	3.25.10· 85% conf.	1,695,155
essential-addons-for-elementor-lite	6.0.11· 85% conf.	251,601
header-footer-elementor	2.0.3· 85% conf.	195,990
lestin-themer	1.0.0· 85% conf.	51
the-events-calendar	—	117,844
woocommerce	9.3.3· 85% conf.	783,975
wp-job-manager	—	16,177

Grade F

6 missing headers

This domain has publicly accessible security-sensitive files or configurations:

Vulnerable WordPress Version (6.8.3) — unauthenticated SQL injection (CVE-2026-60137). Update to 6.8.6 immediately.
User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.

These WordPress domains are served from the same IP (163.44.185.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.