WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: cartflows (Used by 352 domains)

Security snapshot

Across 352 cartflows WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 1% Grade B 1% Grade C 8% Grade D 67% Grade F 23%
Fail the header check (F)23%vs 82.5% avg
Leak usernames47%vs 38.5% avg
Expose a sensitive file0.3%vs 1.8% avg
Use HTTPS94%vs 96.2% avg

What stands out

TLDWP currently associates 352 indexed WordPress sites with cartflows, equivalent to 0% of the current WordPress dataset.

The largest measured difference is header-grade F: 22.7% versus 82.5% overall (-59.8 percentage points).

Username enumeration is 47.3% vs 38.5% overall (+8.8 pp); HTTPS adoption is 93.8% vs 96.2% overall (-2.4 pp); Sensitive-file exposure is 0.3% vs 1.8% overall (-1.5 pp).

These are observational associations among sites where TLDWP detected cartflows, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Infrastructure patterns

Infrastructure detected alongside cartflows. Percentages are within sites where that specific signal was detectable; the baseline compares the same signal across detected WordPress sites overall.

Co-occurrence describes technologies observed on the same sites. Detection coverage varies by signal, and an association does not imply that one technology caused or selected another.

CartFlows

The #1 WordPress Funnel Builder & WooCommerce Checkout Plugin CartFlows is the #1 WordPress funnel builder and WooCommerce checkout plugin—trusted by over 200,000 stores worldwide. Since 2018, CartFlows has helped eCommerce sellers, course creators, agencies, and entrepreneurs turn their WooCommerce stores into high-converting revenue machines. Your WooCommerce checkout should do more than just work—it should convert. Car…

Domain Exposures Headers Last Checked
m*d*z*n*d.com (WP 7.1) D Sep 9, 2026
f*f*o*d*b*.com (WP 7.1) D Sep 8, 2026
d*a*i*b*.com (WP 7.0.4) C Sep 8, 2026
e*e*r*t*c*i*n*d.com (WP 7.1) D Sep 8, 2026
h*j*z*d.com (WP 7.1) D Sep 8, 2026
h*g*t*c*e*c*i*a*.com D Sep 8, 2026
k*t*a*m*n*o.com (WP 7.1) D Sep 8, 2026
e*p*e*i*n*a*t*.com B Sep 8, 2026
k*s*m*r*b*a*t*s*a*.com (WP 7.1) D Sep 8, 2026
f*m*e*o*f*e*q.com (WP 7.1) D Sep 8, 2026
k*t*b*a*.com (WP 7.1) D Sep 8, 2026
w*m*n*c*a*t.com D Sep 8, 2026
r*v*v*y*u*d*w*l*n*.com (WP 7.1) F Sep 7, 2026
b*c*r*b*n*l*.com (WP 7.1) D Sep 7, 2026
w*g*l*a*d*i*g.com (WP 6.8.8) F Sep 7, 2026
a*i*a*s*n*t*m*s.com F Sep 7, 2026
r*v*l*a*b*.com (WP 7.1) D Sep 7, 2026
s*l*y*o.com (WP 7.1) D Sep 7, 2026
e*t*o*h*4.com (WP 6.9) D Sep 7, 2026
k*n*e*-*e*i*n.com (WP 7.1) F Sep 7, 2026
d*p*n*f*b*t*i*l.com (WP 7.0.4) F Sep 7, 2026
s*k*e*n*g*r*.com (WP 7.1) D Sep 6, 2026
d*s*i*i*h*i.com (WP 6.9.4) C Sep 6, 2026
s*h*y*k*.com (WP 7.1) D Sep 6, 2026
d*n*e*p*l*a*e*.com (WP 7.1) F Sep 6, 2026
s*f*m*x*n*i*e*c*o*l.com (WP 7.1) D Sep 6, 2026
b*o*y*u*t*a*s*l*d.com (WP 7.1) D Sep 6, 2026
a*c*e*t*c*e*c*b*.com (WP 7.1) D Sep 5, 2026
n*t*i*i*a*.com (WP 7.1) D Sep 5, 2026
n*t*i*a*l*y*d.com (WP 7.1) D Sep 5, 2026
b*n*o*i*s*o*n*r.com (WP 7.1) D Sep 5, 2026
b*n*o*o*e*.com (WP 7.1) D Sep 5, 2026
r*d*a*h*o*b*.com (WP 7.1) D Sep 5, 2026
u*s*o.com (WP 7.1) D Sep 5, 2026
s*c*r*b*.com (WP 7.1) D Sep 5, 2026
m*g*n*e*o*.pl (WP 6.9.7) F Sep 5, 2026
a*y*a*s*a*l*i*i*a*.com (WP 6.5.5) F Sep 5, 2026
b*i*e*d*o.com (WP 7.1) C Sep 4, 2026
r*l*g*o*e*r*a*c*s.com (WP 7.1) C Sep 4, 2026
h*a*t*y*i*b*r*x*d.com (WP 7.1) C Sep 4, 2026
h*a*t*y*i*b*r*x.com (WP 7.1) C Sep 4, 2026
t*a*s*o*m*t*o*a*c*n*e*s*t*o*s*h*l*e*g*.com (WP 7.1) F Sep 4, 2026
w*i*i*g*o*r*i*t*s*o*y.com (WP 7.1) F Sep 3, 2026
c*a*s*t*k.com (WP 7.1) F Sep 3, 2026
k*d*i*s*a*a*a*m*.com (WP 7.1) D Sep 3, 2026
d*g*n*r*.com (WP 5.7.17) F Sep 3, 2026
s*t*o*r*k*s*.com (WP 7.1) D Sep 3, 2026
s*a*t*a*n*n*s*d.com (WP 7.1) D Sep 3, 2026
a*-*i*a*a.com (WP 7.1) D Sep 3, 2026
z*n*t*h*p*d.com (WP 6.8.8) D Sep 3, 2026
z*l*a*b*.com (WP 7.1) D Sep 3, 2026
s*a*t*o*k*9.com (WP 7.0.4) D Sep 3, 2026
s*a*t*o*k*4.com (WP 6.3) D Sep 3, 2026
a*u*v*d*b*.com (WP 7.1) D Sep 3, 2026
t*p*e*l.com F Sep 3, 2026
r*i*a*s*a*t*i*e.com (WP 7.1) D Sep 3, 2026
t*a*t*b*d*g*a*.com (WP 7.1) F Sep 3, 2026
x*-*l*c*b*d.com (WP 6.5.10) F Sep 2, 2026
d*w*m*r*b*.com (WP 7.1) D Sep 2, 2026
a*a*a*c*l*e*t*o*.com (WP 7.1) D Sep 2, 2026
t*e*o*d.africa (WP 7.1) D Sep 2, 2026
t*s*l*d.com (WP 7.1) D Sep 2, 2026
a*z*k*r*h*p.com (WP 7.1) D Sep 2, 2026
a*z*k*r*e*i*a*.com (WP 7.1) D Sep 2, 2026
a*c*u*t*n*c*u*s*p*.com (WP 7.1) D Sep 1, 2026
p*s*i*n*m*r*.online (WP 7.1) D Sep 1, 2026
n*r*b*b*.com (WP 7.1) D Sep 1, 2026
z*d*d*o*d.com (WP 7.1) D Sep 1, 2026
n*o*e*h*f*.com (WP 6.9.7) C Sep 1, 2026
a*s*e*a*i*e*a*e.com (WP 7.1) C Sep 1, 2026
h*r*m*i*s*l*t*o*.com (WP 7.1) D Aug 31, 2026
o*e*n*a*e*o*f*r*.com (WP 7.0.4) F Aug 31, 2026
r*l*o*l*c*i*n.com (WP 7.1) F Aug 31, 2026
m*r*h*a*e*o*k*.com (WP 7.1) C Aug 31, 2026
r*j*h*h*r*a*w*l*.com (WP 7.1) C Aug 31, 2026
r*j*h*h*a*r*.com (WP 7.0.2) D Aug 31, 2026
f*n*n*i*l*h*a*c*d*s.net (WP 7.1) F Aug 31, 2026
b*z*a*t*d.com (WP 7.1) D Aug 30, 2026
t*p*0*i*a*k*.com (WP 7.1) F Aug 30, 2026
b*s*u*d*o*o*d.com (WP 7.1) D Aug 30, 2026
h*m*a*n*.com (WP 6.8.2) F Aug 29, 2026
y*u*c*o*c*s*.com (WP 7.1) C Aug 29, 2026
w*r*d*a*k*a*d.com (WP 7.1) F Aug 29, 2026
t*c*n*l*g*t*n*b*.com (WP 6.8.3) F Aug 29, 2026
b*o*r*s*e*i*a*.com (WP 7.1) C Aug 29, 2026
n*r*m*y*o*h.com (WP 7.0.2) D Aug 29, 2026
a*r*t*e*r*o*.com (WP 7.1) D Aug 29, 2026
t*r*f*o*g*n*c.com (WP 6.9.5) D Aug 29, 2026
b*o*e*a*m*.com (WP 7.1) F Aug 29, 2026
q*r*n*d*e*d.com (WP 7.1) D Aug 29, 2026
i*t*n*i*e*t*i*d*n*.de (WP 6.7.7) D Aug 28, 2026
i*t*n*i*e*t*i*d*n*.online (WP 6.7.7) D Aug 28, 2026
a*f*a*h*e*.de (WP 6.7.7) D Aug 28, 2026
h*d*y*b*o*g*n*c.com (WP 7.1) D Aug 28, 2026
n*t*r*l*b*i*s.com (WP 7.1) D Aug 28, 2026
n*t*r*l*y*e*l*h*b*.com (WP 7.1) D Aug 28, 2026
n*t*r*l*n*r*y*h*l*e*g*.com F Aug 28, 2026
n*t*r*l*a*g*a*e*h*d.com (WP 7.1) D Aug 28, 2026
s*o*e*h*7*.com (WP 7.1) D Aug 28, 2026
m*m*t*r*s*h*u*e.com (WP 7.1) C Aug 28, 2026