Security snapshot
Across 10 card WordPress sites indexed by TLDWP, compared to the all-WordPress average.
What stands out
TLDWP currently associates 10 indexed WordPress sites with card, equivalent to 0% of the current WordPress dataset.
The largest measured difference is HTTPS adoption: 100% versus 96.2% overall (+3.8 percentage points).
Header-grade F is 80% vs 82.5% overall (-2.5 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp); Username enumeration is 40% vs 38.5% overall (+1.5 pp).
These are observational associations among sites where TLDWP detected card, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
card Premium / Custom
This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| w*i*l*g*g*k*l*c*r*.au | F | Aug 28, 2026 | |
| p*a*t*c*c*r*u*a*i*y.org (WP 7.0.3) | D | Aug 27, 2026 | |
| t*k*t*a*.com (WP 6.6.7) | C | Aug 27, 2026 | |
| j*e*t*d*y.com | F | Aug 27, 2026 | |
| r*a*m*.lk (WP 6.9.1) | F | Aug 18, 2026 | |
| i*.fitness | F | Aug 17, 2026 | |
| i*e*i.fitness | F | Aug 17, 2026 | |
| i*f*t*e*s*e*r*a*.com | F | Jul 31, 2026 | |
| i*f*t*e*s*e*r*i*m*n*.com | F | Jul 31, 2026 | |
| i*e*i*r*i*i*g.com | F | Jul 31, 2026 |