WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: bm-builder (Used by 526 domains)

Security snapshot

Across 526 bm-builder WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 1% Grade C 2% Grade D 5% Grade F 92%
Fail the header check (F)92%vs 82.5% avg
Leak usernames58%vs 38.5% avg
Expose a sensitive file0.9%vs 1.8% avg
Use HTTPS97%vs 96.2% avg

What stands out

TLDWP currently associates 526 indexed WordPress sites with bm-builder, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 58.3% versus 38.5% overall (+19.8 percentage points).

Header-grade F is 92.2% vs 82.5% overall (+9.7 pp); Sensitive-file exposure is 0.9% vs 1.8% overall (-0.9 pp); HTTPS adoption is 97% vs 96.2% overall (+0.8 pp).

These are observational associations among sites where TLDWP detected bm-builder, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Infrastructure patterns

Infrastructure detected alongside bm-builder. Percentages are within sites where that specific signal was detectable; the baseline compares the same signal across detected WordPress sites overall.

Co-occurrence describes technologies observed on the same sites. Detection coverage varies by signal, and an association does not imply that one technology caused or selected another.

bm-builder Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Version Exposures Headers Last Checked
a*y*r*h*t*c*e.com (WP 6.6.7) 3.16.2· 85% conf. F Sep 9, 2026
r*m*s*n*h.com (WP 7.1) 3.15.5· 85% conf. D Sep 9, 2026
k*i*t*-*t*d*o.com (WP 7.1) 3.15.9· 85% conf. F Sep 9, 2026
z*i*e*w*n*e.art (WP 7.0.4) 3.17.1· 85% conf. F Sep 9, 2026
s*a*e*a*e*r*a*i*e.com (WP 7.1) 3.17.1· 85% conf. F Sep 9, 2026
a*t*i*e*o*s*o*o*.com (WP 6.5.10) 3.14.3· 85% conf. F Sep 9, 2026
b*e*d*j*a*d*i*e*r*.com (WP 7.1) 3.17.0· 85% conf. F Sep 9, 2026
f*0*r*h*t*k*e*.com (WP 7.1) F Sep 9, 2026
d*a*e*a*s*n*.com (WP 7.1) 3.15.7· 85% conf. C Sep 9, 2026
k*i*k*a*b*m.com (WP 4.9.26) F Sep 9, 2026
b*i*r*r*e*t.de (WP 6.9.7) 4.1.2· 85% conf. F Sep 9, 2026
k*i*o*k*.com (WP 5.2.21) 1.0.0· 85% conf. F Sep 9, 2026
k*i*u*e*a*k*w*.com (WP 6.7.7) 3.14.3· 85% conf. F Sep 8, 2026
u*t*a*t*d*o.jp (WP 7.1) F Sep 8, 2026
k*y*h*s*g*w*.com (WP 7.1) F Sep 8, 2026
a*n*h*n*i*l*.com (WP 7.0.4) F Sep 8, 2026
d*v*d*o*s*e*.com (WP 7.1) F Sep 8, 2026
d*v*d*j*n*.com (WP 7.1) F Sep 8, 2026
d*v*d*l*r*t*.com (WP 7.1) F Sep 8, 2026
a*n*g*t*a*.com (WP 7.1) F Sep 8, 2026
a*i*s*a*l*m*a*u*z.fr (WP 6.4.3) F Sep 8, 2026
d*v*n*w*r*.com (WP 6.2.11) D Sep 8, 2026
k*r*a*w*t*h*s.com (WP 6.7.1) F Sep 7, 2026
o*i*i*r*r*u*s*a*.com (WP 7.1) F Sep 7, 2026
o*i*e*r*u*.com (WP 7.1) F Sep 7, 2026
k*r*y*n*o*o*l*u.com (WP 7.0.4) F Sep 7, 2026
d*t*a*s.com (WP 7.1) F Sep 7, 2026
a*i*a*t*m.com (WP 5.7.15) F Sep 7, 2026
a*g*s*s*a*a*.com (WP 7.0.4) F Sep 7, 2026
y*u*r*t*e*i*e.com (WP 7.0.4) F Sep 7, 2026
b*u*h*y*a*l*u*t*h.com F Sep 7, 2026
y*t*y*l*y.com (WP 6.9.7) F Sep 7, 2026
b*s*e*l*o*s*r*c*i*n.com (WP 7.0.2) F Sep 6, 2026
b*s*e*l*o*c*e*g*.com (WP 7.0.2) F Sep 6, 2026
b*s*e*l*o*m*r*i*l.com (WP 7.0.2) F Sep 6, 2026
b*s*e*l*o.com (WP 7.0.2) F Sep 6, 2026
b*s*e*l*o*t*q*e.com (WP 7.0.2) F Sep 6, 2026
b*s*e*l.com (WP 7.0.2) F Sep 6, 2026
b*s*e*l*e*i*e*t*a*.com (WP 7.0.2) F Sep 6, 2026
m*g*o*p*e*.com (WP 7.0.4) F Sep 6, 2026
e*o*r*l*b*d*r.com (WP 7.1) C Sep 6, 2026
e*i*h.com (WP 7.1) F Sep 6, 2026
k*n*s*k*n*o.com (WP 7.0.4) F Sep 6, 2026
d*s*g*-*l*u*h*b*r.com (WP 7.1) F Sep 6, 2026
a*d*c*r*z*.com (WP 7.1) F Sep 6, 2026
v*n*i*c*e*m*n*.com (WP 7.1) F Sep 6, 2026
d*n*e*l*w*l*a*h.com (WP 6.9.7) F Sep 6, 2026
y*a*e*.com (WP 5.9.16) F Sep 6, 2026
h*n*r*k*o*e*s*e*n.com F Sep 6, 2026
a*d*e*c*r*e*o*h*t*.com (WP 7.1) F Sep 6, 2026
v*l*a*i*e*.com (WP 7.1) F Sep 6, 2026
d*r*i*n*c*a*d*.com (WP 7.1) B Sep 6, 2026
m*x*m*z*m*u*i.com F Sep 6, 2026
m*x*e*q.com (WP 7.1) F Sep 5, 2026
m*x*h*c*i*g*r.com (WP 7.1) B Sep 5, 2026
n*x*d*s*g*.com (WP 6.5.5) F Sep 5, 2026
a*a*t*s*a*l*r*.com (WP 5.2.26) F Sep 5, 2026
b*n*m*h.com (WP 7.0) F Sep 5, 2026
b*n*e*m*t*h*e*.com (WP 7.1) F Sep 5, 2026
h*i*l*y*a*p*r*.com (WP 7.1) F Sep 5, 2026
r*n*s*e*e*.com (WP 5.8.15) F Sep 5, 2026
d*n*a*k*a*t*s*.com F Sep 5, 2026
r*d*r*e*f*l*s.com (WP 6.5.10) F Sep 5, 2026
c*n*e*p*r*r*e*-*u*r*b*r*.de (WP 7.1) F Sep 5, 2026
n*r*a*s*r*v*m*n*a*e*.com (WP 7.1) F Sep 5, 2026
o*f*n*-*t*l*e*s*d*r*m*n*.de (WP 7.1) F Sep 4, 2026
a*o*m*n*.com (WP 7.0) F Sep 4, 2026
d*h*e*o*g.com (WP 7.0.4) F Sep 4, 2026
a*r*l*e*m*i*l*r*.com (WP 7.1) F Sep 4, 2026
r*b*c*a*n*t*s*.com (WP 7.1) F Sep 4, 2026
d*c*o*a*a*t*a*r*y*.com (WP 7.1) F Sep 4, 2026
z*e*e*r*q*e*.com (WP 7.1) F Sep 3, 2026
j*n*z*k*.com (WP 7.1) F Sep 3, 2026
e*p*i*a*r*n*.com (WP 7.1) F Sep 3, 2026
s*g*h.de (WP 7.1) F Sep 3, 2026
c*i*l*n*.com (WP 7.1) C Sep 3, 2026
b*u*o*e*n*w*b.com F Sep 3, 2026
h*y*e*z*o*r.com (WP 7.1) F Sep 3, 2026
n*g*g*n.jp F Sep 3, 2026
b*u*m*o*-*.com (WP 6.7.7) F Sep 3, 2026
b*u*m*p*e*i*n.com (WP 7.1) F Sep 3, 2026
c*t*l*b*m*d*.com F Sep 3, 2026
n*u*e*l*m*s*r*.com (WP 7.1) F Sep 3, 2026
x*-*l*o*e*s*g*i*r*u*t*c*e*6*b.com (WP 6.2.11) F Sep 3, 2026
s*o*f*.com (WP 6.7.2) F Sep 3, 2026
j*l*a*c*p*o*e.com (WP 7.1) F Sep 3, 2026
t*y*u*u*e*.com F Sep 2, 2026
n*t*r*o*s*v*t*n.com (WP 7.1) F Sep 2, 2026
d*b*n*t*a*b.com (WP 7.1) F Sep 2, 2026
a*c*a.me (WP 7.1) F Sep 2, 2026
a*n*t*e*d*s*g*.com (WP 6.6.7) F Sep 2, 2026
j*d*t*k*r*h*t*r.com (WP 7.1) F Sep 2, 2026
d*v*d*y*o*i*t*.com (WP 7.1) F Sep 2, 2026
e*c*l*n*e*h*t*.com (WP 6.7.5) A Sep 2, 2026
t*e*o*d*.art (WP 6.3.10) F Sep 2, 2026
h*t*h*a*c*e*.com (WP 6.9.7) F Sep 2, 2026
a*a*a*h*h.com C Sep 2, 2026
t*u*o*l.com (WP 7.0) F Sep 2, 2026
m*r*s*t*o*.com (WP 7.1) F Sep 2, 2026
x*-*a*b*r*o*a*t*o*e*r*-*0*.com (WP 7.1) F Sep 2, 2026