WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Breakdown by directory type

10,076 All 6,718 wp-content 417 dev 1,738 test 256 staging 524 backup 423 old
Security Risk: Exposed directory listings allow attackers to enumerate files on your server, potentially discovering backup files, configuration files, or other sensitive data. An exposed /wp-content/ is especially serious — it can reveal uploads, plugin internals and backups.

Showing only /wp-content/ (6,718 sites) — clear filter

Domain Exposed Directory WP Version Headers Other Issues Last Scanned
k*y*8*8.com /wp-content/ Unknown F Sep 3, 2026
c*s*o*w*i*i*g*e*v*c*s*r*v*e*s.com /wp-content/ Unknown F Sep 3, 2026
h*y*7*.com /wp-content/ Unknown F Sep 3, 2026
b*b*r*7.net /wp-content/ Unknown F Sep 3, 2026
z*y*7*7*.com /wp-content/ 6.8.3 F Sep 3, 2026
k*y*4*.com /wp-content/ Unknown F Sep 3, 2026
e*h*a*e*e*g*.com /wp-content/ 7.1 F Sep 3, 2026
a*t*b*e*i*i*u*s.com /wp-content/ 6.4.3 F Sep 3, 2026
n*u*e*l*s*p*r*i*e.com /wp-content/ 7.1 F Sep 3, 2026
b*u*f*e*e*e*g*.com /wp-content/ Unknown F Sep 3, 2026
d*n*s*h*r*l*p*o*o*r*p*y.com /wp-content/ Unknown F Sep 3, 2026
d*n*s*h*r*l*.com /wp-content/ Unknown F Sep 3, 2026
c*e*g*o*p.pk /wp-content/ 7.1 F Sep 3, 2026
e*h*a*s*y*a*.com /wp-content/ 7.1 F Sep 3, 2026
o*d*r*t*o.com /wp-content/ Unknown F Sep 3, 2026
k*w*s*k*7*.com /wp-content/ Unknown F Sep 3, 2026
s*a*m*s*q.biz /wp-content/ 7.1 F Sep 3, 2026
k*w*n*o*o*.com /wp-content/ Unknown F Sep 3, 2026
z*r*t*i*t*n*n*.com /wp-content/ 7.1 F Sep 3, 2026
a*a*i*g*i*e*o*t*n*.com /wp-content/ 6.9.7 F Sep 3, 2026
a*a*i*g*i*h*i*s.com /wp-content/ Unknown F Sep 2, 2026
a*s*c*.ir /wp-content/ 6.3.3 F Sep 2, 2026
h*w*i*o*o.com /wp-content/ Unknown F Sep 2, 2026
e*e*v*t*c*.com /wp-content/ 7.1 F Sep 2, 2026
s*o*w*n*e*1.com /wp-content/ Unknown F Sep 2, 2026
k*w*i*s*o*b*n*l*d*s*.com /wp-content/ 7.1 F Sep 2, 2026
t*y*a*b.com /wp-content/ 7.1 F Sep 2, 2026
s*n*u*n*a*g.com /wp-content/ 6.9.7 F Sep 2, 2026
d*l*g*t*a*g*m*v*r*l*c.com /wp-content/ Unknown F Sep 2, 2026
s*o*t*m*a*g.com /wp-content/ 7.1 F Sep 2, 2026
a*r*m*r*u*t*c*u*a.com /wp-content/ 7.1 F Sep 2, 2026
j*v*z*n.ir /wp-content/ 7.1 F Sep 2, 2026
s*n*a*f*h*b*r*e*i.com /wp-content/ 7.1 F Sep 2, 2026
x*-*k*l*m*k*a*-*u*b.com /wp-content/ Unknown F Sep 2, 2026
s*o*s*7*a.com /wp-content/ Unknown F Sep 2, 2026
x*-*k*s*l*e*b*b.com /wp-content/ Unknown F Sep 2, 2026
s*o*p*1.com /wp-content/ Unknown F Sep 2, 2026
x*-*k*k*n*r*s*a*7*g.com /wp-content/ Unknown F Sep 2, 2026
s*o*r*j*m*o*8.com /wp-content/ Unknown F Sep 2, 2026
s*o*p*n*s*.com /wp-content/ Unknown F Sep 2, 2026
r*c*a*a*.com /wp-content/ 7.0.4 F Sep 2, 2026
o*r*d*w*n*e.com /wp-content/ Unknown F Sep 2, 2026
c*i*u*g*e*e*t*e*i*u*-*r*i*.fr /wp-content/ 7.1 F Sep 2, 2026
t*b*i*w*b*i*e.com /wp-content/ 7.1 F Sep 2, 2026
s*o*m*g*7*7.com /wp-content/ 6.4.1 F Sep 2, 2026
s*o*m*n*a*8*.com /wp-content/ Unknown F Sep 2, 2026
q*b*l*.org /wp-content/ 6.8.5 F Sep 2, 2026
s*o*o*d*.com /wp-content/ Unknown F Sep 2, 2026
h*v*r*i*l*o*e*a*e.com /wp-content/ 7.1 D Sep 2, 2026
t*y*r*z*u*i*d*.com /wp-content/ Unknown F Sep 2, 2026