WordPress maintenance or security needs? Reach out!
TLDWP

Domain Security Report for s*h*l*e*.school

Domain Information

WordPress Version: Unknown

Theme: wplms 6.1.90· 100% conf. (theme used by 363 domains)

Last Checked: 2026-09-09 11:50:18

HTTPS: Yes

Server: Prometheus

Response time (TTFB): 328 ms

Hosting: Hetzner Online GmbH (AS24940)

IP address: 46.225.249.xxx

Plugins (17)

Plugin Version Used By
bbpress 2.6.15· 60% conf. 13,084
buddypress 6,103
elementor 4.2.3· 85% conf. 1,678,767
elementor-pro 4.2.2· 85% conf. 998,699
funnel-builder 1.10.12.80· 60% conf. 2,641
maatos 1.2.111· 60% conf. 40
maatos-analytics 1.3.112· 85% conf. 41
maatos-bunny-stream 1.0.139· 60% conf. 41
mailchimp-for-woocommerce 42,146
mollie-payments-for-woocommerce 1,385
pdf-embedder 13,947
q2w3-fixed-widget 6.2.3· 60% conf. 16,234
two-factor-authentication-premium 54
vibe-course-module 6.1.94· 85% conf. 217
vibe-shortcodes 6.1.0· 60% conf. 180
woocommerce 11.1.0· 85% conf. 776,792
woocommerce-eu-vat-assistant 900

Security Headers

C
Grade C

2 missing headers

Missing headers:

  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • Permissions-Policy — Limits browser features ?

Exposed Files & Configurations

No exposed files detected

Our automated scan did not detect any publicly-accessible sensitive files or critical misconfigurations on this domain.

However, this does not mean the site is completely secure. There are many other potential vulnerabilities that require deeper analysis:

  • Outdated themes or plugins
  • Outdated third-party scripts and software
  • Weak passwords and authentication
  • SQL injection vulnerabilities
  • Cross-site scripting (XSS) issues
  • Insecure server configurations
  • OS command injection vulnerabilities
  • Unprotected file uploads
  • ...

Questions about your WordPress security? Reach out — we offer comprehensive security audits and can help identify hidden vulnerabilities.

Other WordPress domains on this IP (6)

These WordPress domains are served from the same IP (46.225.249.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.