WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: caddy (Used by 293 domains)

Security snapshot

Across 293 caddy WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 3% Grade B 1% Grade C 4% Grade D 13% Grade F 80%
Fail the header check (F)80%vs 82.5% avg
Leak usernames39%vs 38.5% avg
Expose a sensitive file3.1%vs 1.8% avg
Use HTTPS97%vs 96.2% avg

What stands out

TLDWP currently associates 293 indexed WordPress sites with caddy, equivalent to 0% of the current WordPress dataset.

The largest measured difference is header-grade F: 79.5% versus 82.5% overall (-3 percentage points).

Sensitive-file exposure is 3.1% vs 1.8% overall (+1.3 pp); Username enumeration is 39.2% vs 38.5% overall (+0.7 pp); HTTPS adoption is 96.9% vs 96.2% overall (+0.7 pp).

These are observational associations among sites where TLDWP detected caddy, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Infrastructure patterns

Infrastructure detected alongside caddy. Percentages are within sites where that specific signal was detectable; the baseline compares the same signal across detected WordPress sites overall.

Co-occurrence describes technologies observed on the same sites. Detection coverage varies by signal, and an association does not imply that one technology caused or selected another.

Caddy

Caddy is a high performance WooCommerce side cart plugin (also known as a floating cart, sliding cart, cart drawer, or mini cart) that improves your store’s shopping experience and helps grow your sales. It replaces the default WooCommerce cart page with a sticky AJAX side cart that slides in from the edge of the screen, letting customers manage their cart without leaving the page. B…

Domain Exposures Headers Last Checked
y*r*s*i*e*a*e*d*s*i*l*r*.com (WP 7.1) F Sep 9, 2026
c*a*.pl F Sep 8, 2026
t*l*o*i*e.tw (WP 6.9.7) D Sep 8, 2026
t*l*m*b*l*.tw (WP 6.9.7) D Sep 8, 2026
k*r*v*e*e*t*o.com (WP 7.1) F Sep 8, 2026
k*r*s*k*l*e*.com (WP 7.1) B Sep 7, 2026
i*e*f*c*.ru (WP 7.1) F Sep 7, 2026
p*e*i*i*n*l*d.fr F Sep 7, 2026
o*e*n*t*c.com (WP 7.1) F Sep 7, 2026
e*e*r*n*s.com (WP 6.9.7) F Sep 7, 2026
v*a*e*k*r*g*a.com (WP 7.1) F Sep 7, 2026
s*l*n*e*2*.com C Sep 7, 2026
k*m*e*l*e*k*e*p.com (WP 7.1) F Sep 6, 2026
k*n*a*t.com (WP 7.1) B Sep 6, 2026
s*h*e*i*.com (WP 6.9.7) F Sep 6, 2026
v*e*g*g*n*.com (WP 7.1) D Sep 6, 2026
a*d*e*n*i*.com F Sep 6, 2026
m*g*i*n*z*r.eu (WP 7.1) F Sep 6, 2026
d*n*u*a*.com (WP 7.1) F Sep 6, 2026
e*i*a*a*b*a*o.com (WP 7.1) F Sep 6, 2026
f*o*s*c*e*p*o.co F Sep 6, 2026
m*i*l*t*-*a*c*.com F Sep 6, 2026
f*o*c*l*e*t*r*.co F Sep 6, 2026
m*i*l*t*-*s*.com (WP 7.1) F Sep 6, 2026
m*i*l*t*-*e*l*a*r*d.com F Sep 6, 2026
k*k*s*a*e*.com (WP 7.1) F Sep 5, 2026
i*r*a*i*.es A Sep 5, 2026
n*t*y*a*e.com (WP 7.1) F Sep 5, 2026
h*l*o*s*y*i*h*.com (WP 7.1) F Sep 5, 2026
n*t*i*p*r*p*n*m*.com F Sep 5, 2026
s*y*e*.c*m.br (WP 6.4.3) D Sep 5, 2026
t*p*p.c*.uk (WP 7.1) D Sep 5, 2026
k*f*b*.com (WP 6.7.1) F Sep 5, 2026
d*i*y*o*t*r*o*l*n*.com (WP 7.1) F Sep 5, 2026
a*r*t*m*a*r*.com (WP 7.1) C Sep 4, 2026
r*c*r*a*t*b*n.com (WP 6.9.7) F Sep 4, 2026
p*o*r*s*w*i*.c*m.pl (WP 7.1) F Sep 4, 2026
a*m*r*r*c*s*.com (WP 7.1) F Sep 4, 2026
d*b*m*r*s*l*.com (WP 7.1) F Sep 4, 2026
a*d*t*v*p*u*.com (WP 7.0.4) D Sep 4, 2026
z*y*i*s.com (WP 7.1) F Sep 3, 2026
x*c*i*a*i.com (WP 6.7.7) F Sep 3, 2026
e*p*i*-*e*.com F Sep 3, 2026
c*z*e*u.com (WP 7.1) F Sep 3, 2026
t*a*y*p*a*s.com F Sep 3, 2026
o*l*i*p*a*c*s*s.com (WP 7.1) D Sep 3, 2026
a*s*-*x*.com (WP 7.1) F Sep 3, 2026
m*r*i*l*r*s*u*e*m*r*e*.com (WP 7.1) A Sep 2, 2026
z*n*k*y.com (WP 7.1) D Sep 2, 2026
c*c*c*a*t.c*.nz (WP 6.9.7) F Sep 2, 2026
d*r*a*o*t*r*n.com (WP 7.1) F Sep 2, 2026
z*h*w*p*s.com (WP 6.8.3) F Sep 2, 2026
p*v*t*o*n*.c*.uk (WP 7.1) F Sep 2, 2026
t*u*a*i*t*.com C Sep 1, 2026
t*t*b*g*u.com (WP 7.1) F Sep 1, 2026
t*r*a*r*p*s*.com (WP 7.1) F Sep 1, 2026
a*u*a*x*g*b*.com (WP 7.1) F Sep 1, 2026
a*e*b*c*.c*.nz (WP 6.7.7) F Sep 1, 2026
h*r*o*y*k*n*a*e*l.com (WP 7.0) F Sep 1, 2026
c*l*r*r*k.hu F Sep 1, 2026
j*e*e*l*h*l*s*u*g*r*.hu (WP 7.1) F Sep 1, 2026
n*o*w*a*.com F Sep 1, 2026
n*n*t*p*p*v.com A Sep 1, 2026
n*m*s*i*.com (WP 7.0) F Aug 31, 2026
t*l*o*-*e*v*s.com (WP 7.1) F Aug 31, 2026
t*p*g*n*n*.com F Aug 30, 2026
t*p*g*n*n*w*e*s*y.com F Aug 30, 2026
h*n*a*h*l*.com (WP 7.1) F Aug 30, 2026
s*g*o*.net F Aug 30, 2026
n*a*o*h*c*r*.com (WP 7.1) F Aug 30, 2026
h*n*c*a*t*d*h*l*e*.com (WP 6.7.7) F Aug 30, 2026
t*c*i*a*g.com (WP 7.1) F Aug 30, 2026
e*j*y*x*n.com (WP 7.0.4) D Aug 30, 2026
c*i*a*x*a*c*s*o*i*s.com (WP 7.1) F Aug 30, 2026
n*t*i*e*p*g*o*e*.com F Aug 30, 2026
s*n*i*a*a.com (WP 6.9) F Aug 29, 2026
m*n*i*e*p*r*t*.com (WP 6.5.3) F Aug 29, 2026
r*h*a*t*e*s*n*i*l*.com (WP 7.1) F Aug 29, 2026
a*l*n*r*c*m*n.com (WP 7.1) F Aug 29, 2026
n*k*e*b*.com (WP 7.1) D Aug 28, 2026
n*k*a*b*r*a*i.com (WP 7.1) F Aug 28, 2026
j*u*-*-*n*a*t*.com (WP 7.1) F Aug 28, 2026
s*o*t*b*f*r*r*o*s.com (WP 7.1) F Aug 28, 2026
n*t*r*l*e*p*t*e*a*y.com (WP 7.1) F Aug 28, 2026
s*o*s*y*e*n*.com (WP 5.8.15) F Aug 28, 2026
p*o*e*u*a*c*e*i.c*m.br (WP 6.4.3) F Aug 28, 2026
l*t*l*s*i*e*k*d*.com (WP 7.1) F Aug 28, 2026
a*i*-*n*t*n*t.ro F Aug 28, 2026
e*i*y*c*m*i*h*l.com (WP 7.0.4) D Aug 27, 2026
b*t*t*s*n.com (WP 7.1) F Aug 27, 2026
w*n*a*o*a*o*i*s.com (WP 6.5.10) F Aug 27, 2026
v*c*o*y*a*t*.c*m.au (WP 7.0) F Aug 27, 2026
c*x*t*r*s.com (WP 7.1) F Aug 27, 2026
b*u*m*n*o*a*m*.com F Aug 27, 2026
c*x*a*h*o*s*o*e.com (WP 6.5.5) F Aug 27, 2026
y*-*a*k*o*d*.ae (WP 7.1) F Aug 27, 2026
a*e*a*d*t*v*e.com (WP 7.1) F Aug 27, 2026
s*a*r*t*-*e*r*l*g*.c*.uk (WP 7.1) F Aug 27, 2026
r*g*f*r*l*.nz F Aug 27, 2026
a*u*-*a*t*c*.c*m.tr (WP 7.1) F Aug 26, 2026