Security snapshot
Across 283 cff-carousel WordPress sites indexed by TLDWP, compared to the all-WordPress average.
What stands out
TLDWP currently associates 283 indexed WordPress sites with cff-carousel, equivalent to 0% of the current WordPress dataset.
The largest measured difference is username enumeration: 26.5% versus 38.5% overall (-12 percentage points).
Sensitive-file exposure is 4.2% vs 1.8% overall (+2.4 pp); Header-grade F is 80.2% vs 82.5% overall (-2.3 pp); HTTPS adoption is 95.8% vs 96.2% overall (-0.4 pp).
These are observational associations among sites where TLDWP detected cff-carousel, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
Infrastructure patterns
Infrastructure detected alongside cff-carousel. Percentages are within sites where that specific signal was detectable; the baseline compares the same signal across detected WordPress sites overall.
Co-occurrence describes technologies observed on the same sites. Detection coverage varies by signal, and an association does not imply that one technology caused or selected another.
cff-carousel Premium / Custom
This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.
| Domain | Version | Exposures | Headers | Last Checked |
|---|---|---|---|---|
| f*d*r.bio (WP 4.9.31) | 1.2.2· 85% conf. | F | Sep 9, 2026 | |
| x*-*v*l*e*y*e*l*n*k*x*b*2*.dk | — | F | Sep 8, 2026 | |
| n*r*i*e*u*s*n*c*n*e*.com (WP 7.0.4) | — | D | Sep 8, 2026 | |
| t*u*c*o*l*n*.com (WP 7.1) | — | F | Sep 8, 2026 | |
| k*t*h*n*m*t*s.com (WP 7.1) | — | F | Sep 8, 2026 | |
| r*y*n*u*a*c*.com (WP 7.1) | — | D | Sep 8, 2026 | |
| h*h*r*s*o*e.com | — | F | Sep 7, 2026 | |
| w*l*v*a*a*e*.com (WP 7.0.4) | — | D | Sep 7, 2026 | |
| k*p*w*p*r*s*4.com (WP 6.6.7) | — | F | Sep 7, 2026 | |
| r*s*l*s*a*.com (WP 7.0.4) | — | F | Sep 7, 2026 | |
| m*s*i*d*n*s*a.com (WP 7.1) | — | F | Sep 7, 2026 | |
| e*t*u*a*e*e*l*o*s.com (WP 7.0.4) | — | F | Sep 6, 2026 | |
| b*k*d*i*h*r*c*-*a.com (WP 7.1) | — | F | Sep 6, 2026 | |
| s*h*m*a.com (WP 7.0.4) | — | F | Sep 6, 2026 | |
| v*s*t*o*i*a.com (WP 7.1) | — | F | Sep 6, 2026 | |
| s*h*l*e*e*s*t*t*a*p*o*e*t*n.nl (WP 6.8.8) | — | F | Sep 6, 2026 | |
| e*f*r*e*c*n*e*r*d*.com (WP 7.1) | — | F | Sep 5, 2026 | |
| d*l*p*r*u*e*y.com (WP 7.1) | — | F | Sep 5, 2026 | |
| n*t*i*n*s*e*a*d*h*p.com (WP 7.0.4) | — | B | Sep 5, 2026 | |
| g*y*e*h*f*t*d*.eu (WP 5.7.17) | — | B | Sep 5, 2026 | |
| d*m*f*r*e.com (WP 6.7.7) | — | F | Sep 5, 2026 | |
| h*a*t*y*a*d*e*l.com | — | F | Sep 4, 2026 | |
| d*d*o*c*r*.com (WP 7.1) | — | F | Sep 4, 2026 | |
| m*d*n*l*s*u*n*t*r*b*d*i*g.c*m.au | — | F | Sep 4, 2026 | |
| o*e*e*i*o.me (WP 7.1) | — | F | Sep 3, 2026 | |
| n*y*l*r*c*f*.com (WP 7.1) | — | F | Sep 3, 2026 | |
| a*e*i*a*a*s*s*e*s.com (WP 7.1) | — | F | Sep 3, 2026 | |
| a*t*s*d*a*s*g*.com (WP 7.1) | — | F | Sep 3, 2026 | |
| g*g*r*g*a*a.org (WP 6.8.8) | — | F | Sep 2, 2026 | |
| k*c*.o*.th (WP 6.8.8) | — | F | Sep 2, 2026 | |
| a*e*e*o*l*n*c*l*e*e*r*h.com | — | F | Sep 2, 2026 | |
| c*r*t*e*r*s*s.com | — | B | Sep 2, 2026 | |
| t*u*u*t*v*l*e*.com | — | D | Sep 2, 2026 | |
| s*a*l*j*u*v.com (WP 7.1) | — | F | Sep 2, 2026 | |
| s*a*l*j*u.com (WP 7.1) | — | F | Sep 2, 2026 | |
| g*i*e*-*a*e*i*l.fr (WP 7.1) | — | F | Sep 2, 2026 | |
| t*u*h*f*o*e*h*l*o*.com (WP 7.1) | — | F | Sep 2, 2026 | |
| 2*d*h*n*e*o*s.org (WP 6.7.7) | — | F | Sep 1, 2026 | |
| f*y*n*y*s*r*.com | — | F | Sep 1, 2026 | |
| s*e*l*n*v*-*p*j*e*i*s*.nl | — | F | Sep 1, 2026 | |
| o*t*d*h*f.nl | — | F | Sep 1, 2026 | |
| d*h*u*e*m*a*l*n*.nl | — | F | Sep 1, 2026 | |
| m*s*k*c*u*e*-*i*d*r*a*h*e*.de | — | F | Aug 31, 2026 | |
| v*s*o*w*s*.o*g.nz | — | F | Aug 31, 2026 | |
| a*s*s*9.com (WP 6.9.7) | — | F | Aug 31, 2026 | |
| a*s*s*s*r*i*e*.com (WP 6.9.7) | — | F | Aug 31, 2026 | |
| e*c*l*e*t*n*e*t*i*m*n*.biz (WP 7.1) | — | F | Aug 31, 2026 | |
| b*k*c*.com (WP 7.1) | — | F | Aug 31, 2026 | |
| u*d*r*i*l*p*c*.ca (WP 7.1) | — | F | Aug 30, 2026 | |
| m*r*e*o*l*a*.com (WP 7.1) | — | F | Aug 30, 2026 | |
| l*c*s*y*h*b*y.com (WP 7.1) | — | F | Aug 30, 2026 | |
| t*u*a*i*g.online (WP 7.1) | — | F | Aug 30, 2026 | |
| r*d*o*e*d*c*o*o*l*n*.com (WP 7.0) | — | F | Aug 30, 2026 | |
| m*r*e*i*g*q*a*.pl | — | F | Aug 30, 2026 | |
| w*r*w*t*r*b*r*s*n.com | — | F | Aug 29, 2026 | |
| t*l*d*c*i*i*.com | — | F | Aug 29, 2026 | |
| e*c*m*a*n*e*e*o*i*i*r*.com | — | F | Aug 29, 2026 | |
| e*p*r*s*.com (WP 7.1) | — | F | Aug 28, 2026 | |
| t*m*p*p*e*e*t*.com (WP 7.1) | — | F | Aug 28, 2026 | |
| t*m*p*p.com (WP 7.1) | — | F | Aug 28, 2026 | |
| s*r*i*e*o*a*a*e.c*.uk | — | F | Aug 27, 2026 | |
| c*s*e*t*r*c*c*i*g.c*.uk | — | F | Aug 27, 2026 | |
| h*b*t*t*g*.org | — | F | Aug 27, 2026 | |
| n*r*y*n*a*j*v.com | — | F | Aug 27, 2026 | |
| g*n*r*l*i*g.com | — | F | Aug 26, 2026 | |
| r*a*o*e*a*h*l*c.org | — | F | Aug 26, 2026 | |
| r*s*l*s*a*.org (WP 7.0.4) | — | F | Aug 26, 2026 | |
| c*u*t*y*d*g*.com (WP 7.1) | — | F | Aug 26, 2026 | |
| t*l*s*a*c*e*t*r.com (WP 7.1) | — | F | Aug 26, 2026 | |
| f*i*n*s*i*-*r*n*e.fr | — | F | Aug 26, 2026 | |
| 4*n*t*i*n*s*e*a*d*h*p.com (WP 7.0.4) | — | B | Aug 26, 2026 | |
| s*c*n*c*a*c*d*g*.org (WP 6.7.7) | — | F | Aug 25, 2026 | |
| c*r*e*c*e*n*n*l*e*s.c*.uk (WP 6.7.7) | — | D | Aug 25, 2026 | |
| a*c*p*.com (WP 7.1) | — | F | Aug 25, 2026 | |
| s*e*i*l*s*e*-*y*l*r.dk | — | F | Aug 25, 2026 | |
| i*a*a*i*o*n*a.org | — | F | Aug 25, 2026 | |
| c*l*r*h*.ca (WP 7.0.4) | — | F | Aug 25, 2026 | |
| s*a*o*.g*v.uk (WP 7.0.4) | — | F | Aug 25, 2026 | |
| c*r*s*a*e.com | — | F | Aug 24, 2026 | |
| n*m*.org (WP 7.0.4) | — | B | Aug 24, 2026 | |
| e*f*.org (WP 7.0.4) | — | F | Aug 24, 2026 | |
| c*n*e*p*y*d*l*r*n*.fr | — | F | Aug 24, 2026 | |
| f*u*d*e*t*l*z*r.org (WP 7.0.4) | — | F | Aug 24, 2026 | |
| d*r*s*u*y*o*e.o*g.uk (WP 7.1) | — | F | Aug 23, 2026 | |
| s*i*s*e*e*s*s*l*t*o*s.com (WP 4.9.8) | — | F | Aug 23, 2026 | |
| c*o*c*r*h*a*.com | — | F | Aug 23, 2026 | |
| i*p*.org (WP 7.0.4) | — | B | Aug 23, 2026 | |
| g*w*.org (WP 7.0.4) | — | B | Aug 23, 2026 | |
| c*i*f*r*e*n*e*n*t*o*a*e.com (WP 6.8.8) | — | F | Aug 23, 2026 | |
| m*g*v*r*s*a*i*y*e*t*u*a*t.com (WP 6.7.7) | — | F | Aug 23, 2026 | |
| m*m*v*s*u*i*.com (WP 7.0.4) | — | F | Aug 22, 2026 | |
| h*f*e*j*r*o*r*t.nl (WP 7.0.4) | — | C | Aug 22, 2026 | |
| a*r*i*r*p*o*.com (WP 5.0.4) | — | F | Aug 22, 2026 | |
| p*a*a*e*r*k*j*n*.com | — | F | Aug 22, 2026 | |
| p*a*u*s*a*l.com | — | F | Aug 22, 2026 | |
| b*r*i*a*a*p*e*s*.fr (WP 7.1) | — | F | Aug 22, 2026 | |
| b*d*y*p*b*i*i*a*.com (WP 7.0.2) | — | F | Aug 22, 2026 | |
| z*w*e*.c*m.pl (WP 6.6.2) | — | A | Aug 21, 2026 | |
| c*n*e*i*s*s*.com | — | F | Aug 21, 2026 | |
| a*a*u*a*m*.c*.nz | — | B | Aug 21, 2026 |