WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: aroma-expander (Used by 7 domains)

Security snapshot

Across 7 aroma-expander WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 0% Grade C 0% Grade D 0% Grade F 100%
Fail the header check (F)100%vs 82.5% avg
Leak usernames71%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS86%vs 96.2% avg

What stands out

TLDWP currently associates 7 indexed WordPress sites with aroma-expander, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 71.4% versus 38.5% overall (+32.9 percentage points).

Header-grade F is 100% vs 82.5% overall (+17.5 pp); HTTPS adoption is 85.7% vs 96.2% overall (-10.5 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).

These are observational associations among sites where TLDWP detected aroma-expander, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

aroma-expander Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
o*-*a.com (WP 6.8.8) F Sep 8, 2026
k*r*d*t*.com (WP 7.0.4) F Sep 7, 2026
t*y*m*-*t*l*t*.com (WP 6.8.8) F Sep 2, 2026
m*r*o*s*n*u*-*.com (WP 5.5.20) F Aug 31, 2026
a*o*o*o.c*.jp (WP 5.1.19) F Aug 25, 2026
c*l*r*u*d*y*2*0*.com F Aug 24, 2026
k*i*u*i*p.com (WP 5.8.13) F Jul 19, 2026