WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Breakdown by directory type

๐Ÿ“‚ 4,165 All ๐Ÿ—‚๏ธ 562 wp-content ๐Ÿ› ๏ธ 497 dev ๐Ÿงช 1,672 test ๐Ÿšง 332 staging ๐Ÿ’พ 636 backup ๐Ÿ“ฆ 465 old
โš ๏ธ Security Risk: Exposed directory listings allow attackers to enumerate files on your server, potentially discovering backup files, configuration files, or other sensitive data. An exposed /wp-content/ is especially serious โ€” it can reveal uploads, plugin internals and backups.

Showing only /wp-content/ (560 sites) โ€” clear filter

Domain Exposed Directory WP Version Headers Other Issues Last Scanned
s*l*h.au ๐Ÿ”’ /wp-content/ 6.3.8 F โ€” Jun 8, 2026
w*l*i*g*o*i*m*g*a*i*n.ca ๐Ÿ”’ /wp-content/ 6.9.4 F โ€” Jun 8, 2026
o*a*k*a*i*n*w*.com ๐Ÿ”’ /wp-content/ 6.9.4 F โ€” Jun 8, 2026
o*a*k*a*i*n*t*o*k.com ๐Ÿ”’ /wp-content/ 6.9.4 F โ€” Jun 8, 2026
v*c*t*o*i*n.com ๐Ÿ”’ /wp-content/ 7.0 F ๐Ÿ‘ค Jun 8, 2026
o*x*p*i*t*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 8, 2026
b*l*a*r*i*z.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 8, 2026
o*t*r*e*r*d*s*o*d*r*i*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 8, 2026
i*p*c*h*b.c*m.ng ๐Ÿ”’ /wp-content/ 6.6.2 F โ€” Jun 8, 2026
o*g*m*s*e*e*r*h.com ๐Ÿ”’ /wp-content/ 6.5.3 F โ€” Jun 8, 2026
o*t*7*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 8, 2026
o*l*n*k*r*m.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 8, 2026
g*p*e*y*l*g*.org ๐Ÿ”’ /wp-content/ 6.6.2 F ๐Ÿ‘ค Jun 8, 2026
o*g*o*l*s*s.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 8, 2026
q*a*r*f*e*d.c*.uk ๐Ÿ”’ /wp-content/ 6.4.8 F ๐Ÿ‘ค Jun 8, 2026
x*-*p*t*k*6*p*h*r*a.tw ๐Ÿ”’ /wp-content/ 6.5.5 F โ€” Jun 8, 2026
b*r*a*-*t*d*-*h*r*i*u*-*o*.fr ๐Ÿ”’ /wp-content/ 7.0 F โ€” Jun 8, 2026
p*p*4*i.net ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 8, 2026
q*e*n*f*e*c*n*t*o*k.org ๐Ÿ”’ /wp-content/ Unknown F ๐Ÿ‘ค Jun 8, 2026
o*e*n*1.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 8, 2026
v*b*d*t*o*s.com ๐Ÿ”’ /wp-content/ 6.8.1 F โ€” Jun 8, 2026
e*s*f*a*s*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 8, 2026
n*a*i*s*o*i*t*s.com ๐Ÿ”’ /wp-content/ 6.9.4 F โ€” Jun 7, 2026
n*-*r*m*w*r*.com ๐Ÿ”’ /wp-content/ 6.8.3 F โ€” Jun 7, 2026
b*l*7*b.net ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 7, 2026
t*c*i*a*g*a*s*a*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 7, 2026
t*e*n*e*t*v*l*b.com ๐Ÿ”’ /wp-content/ Unknown F ๐Ÿ‘ค Jun 7, 2026
n*h*m*s*e*t*r*s.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 7, 2026
n*p*d*i*e.com ๐Ÿ”’ /wp-content/ 7.0 F โ€” Jun 7, 2026
t*e*o*l*n*.com ๐Ÿ”’ /wp-content/ 4.2.4 D โ€” Jun 7, 2026
l*m*t*o*o*i*a*b*o*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 7, 2026
d*v*s*z*r*c*.com ๐Ÿ”’ /wp-content/ 5.5 F โ€” Jun 7, 2026
u*e*e*a*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 7, 2026
t*o*i*n*w*.com ๐Ÿ”’ /wp-content/ 6.4.3 B โ€” Jun 7, 2026
a*l*i*t*o*a*i*s.com ๐Ÿ”’ /wp-content/ 5.4.2 B โ€” Jun 7, 2026
n*a*e*u.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 7, 2026
w*i*i*g*o*y*u.c*m.au ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 7, 2026
t*e*e*o*t*r*.c*m.ng ๐Ÿ”’ /wp-content/ 7.0 F โ€” Jun 7, 2026
b*s*p*p*e*s*r*y.net ๐Ÿ”’ /wp-content/ Unknown D โ€” Jun 7, 2026
n*u*r*t*c*.com ๐Ÿ”’ /wp-content/ 6.6.2 F โ€” Jun 7, 2026
s*r*i*e.se ๐Ÿ”’ /wp-content/ 6.9.4 F โ€” Jun 7, 2026
n*t*r*o*s*u*i*i*e*.com ๐Ÿ”’ /wp-content/ 6.8.1 F โ€” Jun 7, 2026
n*r*h*e*t*l*b*l*.com ๐Ÿ”’ /wp-content/ 6.9.4 F โ€” Jun 7, 2026
n*r*h*t*r*e*l*.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 7, 2026
r*c*s.c*m.br ๐Ÿ”’ /wp-content/ Unknown F ๐Ÿ‘ค Jun 7, 2026
c*e*a*a*.sc ๐Ÿ”’ /wp-content/ 7.0 F ๐Ÿ‘ค Jun 7, 2026
n*r*h*a*t*a*q*e*.com ๐Ÿ”’ /wp-content/ 7.0 D ๐Ÿ‘ค Jun 7, 2026
g*u*o*p*.mx ๐Ÿ”’ /wp-content/ 7.0 F โ€” Jun 7, 2026
n*m*a*a*r*.com ๐Ÿ”’ /wp-content/ 7.0 F โ€” Jun 7, 2026
n*m*h*r*l*d.com ๐Ÿ”’ /wp-content/ Unknown F โ€” Jun 7, 2026