WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Breakdown by directory type

๐Ÿ“‚ 4,477 All ๐Ÿ—‚๏ธ 620 wp-content ๐Ÿ› ๏ธ 536 dev ๐Ÿงช 1,828 test ๐Ÿšง 342 staging ๐Ÿ’พ 665 backup ๐Ÿ“ฆ 485 old
โš ๏ธ Security Risk: Exposed directory listings allow attackers to enumerate files on your server, potentially discovering backup files, configuration files, or other sensitive data. An exposed /wp-content/ is especially serious โ€” it can reveal uploads, plugin internals and backups.

Showing only /wp-content/ (620 sites) โ€” clear filter

Domain Exposed Directory WP Version Headers Other Issues Last Scanned
t*t*n*t.net ๐Ÿ”’ /wp-content/ 5.1.19 F โ€” Jun 16, 2026
h*a*t*y*o*d*e*r*v*l*.net ๐Ÿ”’ /wp-content/ Unknown D โ€” Jun 16, 2026
k*r*o*b*.no ๐Ÿ”’ /wp-content/ 7.0 F โ€” Jun 16, 2026
g*o*a*e*-*e*m.org ๐Ÿ”’ /wp-content/ 4.1.26 F โ€” Jun 16, 2026
b*o*.j*s*d*l*g*t*.co ๐Ÿ”’ /wp-content/ 5.4.11 F โ€” Jun 16, 2026
a*f*.c*m.au ๐Ÿ”’ /wp-content/ Unknown F ๐Ÿ‘ค Jun 16, 2026
e*t*e*r*l*v*.com ๐Ÿ”’ /wp-content/ 6.7.2 F โ€” Jun 16, 2026
e*n*.c*.ao ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 16, 2026
d*a*c*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 16, 2026
h*r*n*a*e.trade ๐Ÿ”’ /wp-content/ 6.9 F โ€” Jun 16, 2026
m*n*e*e*.w*.g*v.au ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 16, 2026
d*z*n*i*n.com ๐Ÿ”’ /wp-content/ 6.4.8 F โ€” Jun 16, 2026
v*r*u.vn ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 16, 2026
l*s*o*e*u*f*l*b.c*m.au ๐Ÿ”’ /wp-content/ Unknown F ๐Ÿ‘ค Jun 16, 2026
s*o*.m*x*m*m*o*o*s*o*t.c*m.au ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 16, 2026
c*o*b*b*k*d.com ๐Ÿ”’ /wp-content/ 6.0.1 F โ€” Jun 16, 2026
s*y*e*i*p*o*u*t*o*s.c*m.au /wp-content/ Unknown F โ€” Jun 16, 2026
f*e*i*i*p*y*i*t*e*a*y.c*m.au ๐Ÿ”’ /wp-content/ 6.9.4 F โ€” Jun 16, 2026
w*l*u*s*r*n*s*x*a*l*.com ๐Ÿ”’ /wp-content/ 7.0 F ๐Ÿ‘ค Jun 15, 2026
g*e*k*p*c*e*i*c*r*s.nl ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 15, 2026
b*l*s*e*t.s*.o*g.au ๐Ÿ”’ /wp-content/ 4.6.25 F โ€” Jun 15, 2026
l*g*v*e.fr ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 15, 2026
n*v*.a*a*i*e*a*o*a*o*i*c*i*i*o.c*m.br ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 15, 2026
c*a*b*u*n*l*c.c*m.au ๐Ÿ”’ /wp-content/ 7.0 F โ€” Jun 15, 2026
s*t*a*h*y*n.org ๐Ÿ”’ /wp-content/ 5.3.2 C โ€” Jun 15, 2026
a*t*.o*.id ๐Ÿ”’ /wp-content/ 6.8.5 F ๐Ÿ‘ค Jun 15, 2026
r*g*i*e*e*.com ๐Ÿ”’ /wp-content/ Unknown D โ€” Jun 15, 2026
c*r*a*s*a*r*m*r*.c*m.ar ๐Ÿ”’ /wp-content/ 4.9.26 F โ€” Jun 15, 2026
j*n*a*s*t*k.com ๐Ÿ”’ /wp-content/ 3.4.1 F โ€” Jun 15, 2026
s*a*t*r*v*.c*m.ng ๐Ÿ”’ /wp-content/ 6.8.1 F โ€” Jun 15, 2026
t*e*l*e*n*t*v*c*i*k*t*l*a*a*k.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 15, 2026
s*d*e*l*t*o*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 15, 2026
b*r*s*f*r*y*n*i*e.com ๐Ÿ”’ /wp-content/ 4.9.1 F โ€” Jun 15, 2026
r*c*t*e*b*b*.com ๐Ÿ”’ /wp-content/ 5.2.15 F โ€” Jun 15, 2026
c*i*a*e*h*n*e*0*8.c*i.a*.cy ๐Ÿ”’ /wp-content/ 6.1.1 F โ€” Jun 15, 2026
c*.h*a*t*y*f*o*-*e*r*m*.com ๐Ÿ”’ /wp-content/ 7.0 D ๐Ÿ”“๐Ÿ‘ค Jun 14, 2026
b*n*h*m*r*j*c*s.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 14, 2026
b*r*h*o*k.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 14, 2026
p*i*i*p*n*c*f*e*g*i*d.org ๐Ÿ”’ /wp-content/ 6.6.1 F โ€” Jun 14, 2026
r*t*a*r*u*.c*m.au ๐Ÿ”’ /wp-content/ 7.0 F โ€” Jun 14, 2026
e*r*p*n*r*s*l.c*m.br ๐Ÿ”’ /wp-content/ 5.8.4 F โ€” Jun 14, 2026
s*m*o*n*t*r*.com ๐Ÿ”’ /wp-content/ 6.9.4 F โ€” Jun 14, 2026
c*l*k*o*e*2.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 14, 2026
p*e*o*e*o*.c*m.au ๐Ÿ”’ /wp-content/ 6.8.5 F โ€” Jun 14, 2026
r*n*p*o*e*t*r.c*m.ng ๐Ÿ”’ /wp-content/ 7.0 C ๐Ÿ‘ค Jun 14, 2026
r*n*i*g*a*s*e*s.org ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 14, 2026
p*t*.u*m*h*a*e*.a*.id ๐Ÿ”’ /wp-content/ Unknown A โ€” Jun 14, 2026
p*i.u*m*h*a*e*.a*.id ๐Ÿ”’ /wp-content/ Unknown A โ€” Jun 14, 2026
p*s*.u*m*h*a*e*.a*.id ๐Ÿ”’ /wp-content/ Unknown A โ€” Jun 14, 2026
h*f*m*r*c*n*.c*m.br ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 14, 2026