WordPress maintenance or security needs? Reach out!
TLDWP

Domain Security Report for **************.com

Publicly observed software, infrastructure, and security signals Last checked: 2026-10-18 17:45:21

Domain Information

WordPress Version: 7.1.3 No known vulnerabilities

Detected theme flatsome
3.19.6· 100% conf.MEDIUM7 vulnerability matches
Used by 116,078 domains

Last Checked: 2026-10-18 17:45:21

HTTPS: Yes

Server: cloudflare

CDN / WAF: Cloudflare

Response time (TTFB): 1,261 ms slow

Hosting: Cloudflare, Inc. (AS13335)

IP address: 172.67.150.xxx

Plugins (0)

Versions are displayed when reliable observations are available.

No plugins found.

Security Findings

These findings combine public scan observations with advisories matching detected software versions. Version matches do not establish exploitation.

Plugin & theme vulnerabilities

  • Theme: flatsome 3.19.6 — 7 matching advisories (highest severity: Medium). View advisories

Other observed security findings

  • User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?

Need help securing your WordPress infrastructure? Contact us for a professional security audit.

Security Headers

F
Grade F

5 missing headers

Missing headers:

  • Content-Security-Policy (CSP) — Prevents XSS attacks ?
  • X-Content-Type-Options — Prevents MIME sniffing ?
  • X-Frame-Options — Prevents clickjacking ?
  • Referrer-Policy — Controls referrer information ?
  • Permissions-Policy — Limits browser features ?

Other WordPress domains on this IP (17)

These WordPress domains are served from the same IP (172.67.150.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.

Show 9 more domains