WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: boutique-toolkit (Used by 5 domains)

Security snapshot

Across 5 boutique-toolkit WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 0% Grade C 0% Grade D 0% Grade F 100%
Fail the header check (F)100%vs 82.5% avg
Leak usernames40%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS80%vs 96.2% avg

What stands out

TLDWP currently associates 5 indexed WordPress sites with boutique-toolkit, equivalent to 0% of the current WordPress dataset.

The largest measured difference is header-grade F: 100% versus 82.5% overall (+17.5 percentage points).

HTTPS adoption is 80% vs 96.2% overall (-16.2 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp); Username enumeration is 40% vs 38.5% overall (+1.5 pp).

These are observational associations among sites where TLDWP detected boutique-toolkit, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

boutique-toolkit Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
s*a*l*r*.com (WP 5.8.15) F Sep 5, 2026
m*s*-*a*h*o*.at (WP 6.0.14) F Aug 30, 2026
s*i*t*a*.com F Aug 23, 2026
b*s*i*a*e*l*t*e*i*.com (WP 7.0.4) F Aug 19, 2026
o*i*y.fr F Aug 2, 2026