WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Breakdown by directory type

10,076 All 6,718 wp-content 417 dev 1,738 test 256 staging 524 backup 423 old
Security Risk: Exposed directory listings allow attackers to enumerate files on your server, potentially discovering backup files, configuration files, or other sensitive data. An exposed /wp-content/ is especially serious — it can reveal uploads, plugin internals and backups.

Showing only /wp-content/ (6,718 sites) — clear filter

Domain Exposed Directory WP Version Headers Other Issues Last Scanned
h*s*a*a*d*l*a*l*w.com /wp-content/ 6.1.1 F Sep 2, 2026
t*u*i*m*n*a*i*t*o*.com /wp-content/ 7.1 F Sep 2, 2026
o*f*c*a*m*s*g*a*d*h*n*.com /wp-content/ Unknown F Sep 2, 2026
b*o*p*b*i*a*i*n.com /wp-content/ 7.1 F Sep 2, 2026
d*l*a*e*e*u*o*.dev /wp-content/ Unknown F Sep 2, 2026
m*r*c*4*e*i*.com /wp-content/ 7.1 F Sep 2, 2026
t*s*r*-*a*r*l*v*.com /wp-content/ 7.1 F Sep 2, 2026
o*f*c*a*i*l*m*n*t*b*o*h*r*o*d.com /wp-content/ 5.2.4 F Sep 2, 2026
m*r*o*e*l*d.com /wp-content/ Unknown F Sep 2, 2026
b*g*o*.c*m.sg /wp-content/ 7.1 F Sep 2, 2026
h*s*i*u*i*.com /wp-content/ 7.1 F Sep 2, 2026
h*r*h*m*.com /wp-content/ 6.4.5 F Sep 2, 2026
r*t*a*a*a*o*l*n*.com /wp-content/ 6.9.4 F Sep 2, 2026
t*e*d*a*i*s*n*i*e.com /wp-content/ 7.1 F Sep 2, 2026
c*a*i*y*i*h*.o*g.au /wp-content/ 7.0.4 F Sep 1, 2026
t*u*h*h*b*r.com /wp-content/ Unknown F Sep 1, 2026
n*r*h*h*r*d*n*i*t*y*n*o.com /wp-content/ 7.0.4 F Sep 1, 2026
a*e*i*b*b*s*a.com /wp-content/ 7.1 F Sep 1, 2026
r*t*h*s*.com /wp-content/ 7.1 D Sep 1, 2026
s*y*i*w*e*p*e*s*o*i*t*c*.com /wp-content/ 6.2.2 F Sep 1, 2026
c*m*l*t*o*.com /wp-content/ Unknown D Sep 1, 2026
b*i*a*s*a*t*b*.c*m.br /wp-content/ Unknown F Sep 1, 2026
o*g*b*k*s.c*m.br /wp-content/ Unknown F Sep 1, 2026
z*s*o*a*.com /wp-content/ 7.1 F Sep 1, 2026
c*l*u*r*c*.c*.uk /wp-content/ 7.0.4 F Sep 1, 2026
s*y*i*e*e*l.com /wp-content/ 7.1 D Sep 1, 2026
e*i*n*c*l*c*a*h*n*.com /wp-content/ Unknown F Sep 1, 2026
s*y*i*e*t*e*c*.com /wp-content/ 5.5.7 F Sep 1, 2026
a*c*n*t*c*l*d.com /wp-content/ 5.7.4 F Sep 1, 2026
t*t*l*o*l*t*.com /wp-content/ 7.1 F Sep 1, 2026
h*r*m*n*o*r*s.com /wp-content/ 7.0.2 F Sep 1, 2026
j*m*s*e*s*r*u*.com /wp-content/ Unknown F Sep 1, 2026
t*t*l*o*s*h*l*.com /wp-content/ Unknown F Sep 1, 2026
e*i*o*o*f*e.com /wp-content/ Unknown F Sep 1, 2026
b*z*e*o*o.c*m.pl /wp-content/ Unknown F Sep 1, 2026
w*r*d*e*o*i*b*e.pl /wp-content/ Unknown F Sep 1, 2026
c*r*o*f*b.com /wp-content/ 7.1 F Sep 1, 2026
z*p*n*n.com /wp-content/ 7.0.4 F Sep 1, 2026
t*t*l*i*a*e*s.com /wp-content/ 7.1 F Sep 1, 2026
a*u*r*f*f*b*i*a*i*n.com /wp-content/ 7.1 F Sep 1, 2026
t*r*e*o*m*t*c.com /wp-content/ 7.1 F Sep 1, 2026
a*t*h*f*d*e*.com /wp-content/ Unknown F Sep 1, 2026
s*y*a*t*o*s.com /wp-content/ 7.1 F Sep 1, 2026
n*r*a*s*o*l*c*g*r*h*p.com /wp-content/ 7.1 F Sep 1, 2026
h*r*r*h*b.com /wp-content/ 7.1 F Sep 1, 2026
b*i*h*m*.com /wp-content/ 7.1 F Sep 1, 2026
z*m*a*i*t*r*a*i*n*l.com /wp-content/ 7.1 F Sep 1, 2026
t*r*i*f*l*.com /wp-content/ Unknown D Sep 1, 2026
o*y*s*y*x*r*s*t*a*e*.com /wp-content/ 7.1 F Sep 1, 2026
e*g*n*s*l*t*o*s.com /wp-content/ Unknown F Sep 1, 2026