Domain Information
WordPress Version: 4.9.6 VULNERABLE
Theme: hestia-child (theme used by 74 domains)
Last Checked: 2026-09-07 23:46:06
HTTPS: Yes
Server: openresty
Response time (TTFB): 626 ms
Hosting: Jsc ru-center (AS48287)
IP address: 91.189.114.xxx
PHP version: 7.4.33 — end-of-life, no security updates
Plugins (12)
| Plugin | Version | Used By |
|---|---|---|
| add-search-to-menu | — | 23,372 |
| addons-for-elementor | — | 4,906 |
| ari-fancy-lightbox | — | 3,209 |
| elementor | — | 1,696,826 |
| elements-plus | — | 599 |
| lightweight-social-icons | — | 3,304 |
| social-icons-widget-by-wpzoom | — | 21,474 |
| the-events-calendar | — | 117,989 |
| unisender | — | 63 |
| widgetkit-for-elementor | — | 810 |
| wp-accessibility-helper | — | 2,738 |
| wp-responsive-recent-post-slider | — | 3,409 |
Security Headers
4 missing headers
Exposed Files & Configurations
This domain has publicly accessible security-sensitive files or configurations:
- Vulnerable WordPress Version (4.9.6) — outdated core with known vulnerabilities. Update to the latest release immediately.
- User enumeration exposed — Usernames are publicly discoverable via the REST API or author archives, aiding brute-force attacks ?
Need help securing your WordPress infrastructure? Contact us for a professional security audit.
Other WordPress domains on this IP (2)
These WordPress domains are served from the same IP (91.189.114.xxx) — usually shared hosting or the same operator. Domains are obfuscated uniformly.