WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: cff-extensions (Used by 1,818 domains)

Security snapshot

Across 1,818 cff-extensions WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 6% Grade B 2% Grade C 7% Grade D 16% Grade F 69%
Fail the header check (F)69%vs 82.5% avg
Leak usernames22%vs 38.5% avg
Expose a sensitive file1.5%vs 1.8% avg
Use HTTPS97%vs 96.2% avg

What stands out

TLDWP currently associates 1,818 indexed WordPress sites with cff-extensions, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 22% versus 38.5% overall (-16.5 percentage points).

Header-grade F is 69.3% vs 82.5% overall (-13.2 pp); HTTPS adoption is 97.1% vs 96.2% overall (+0.9 pp); Sensitive-file exposure is 1.5% vs 1.8% overall (-0.3 pp).

These are observational associations among sites where TLDWP detected cff-extensions, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

cff-extensions Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
f*i*v*e*c*u*t.c*.uk (WP 7.0) F Sep 8, 2026
h*m*l*h*i*h*s*a*e*o*e.c*.uk (WP 7.0) F Sep 8, 2026
a*g*n*u*l*d*e.com (WP 7.0.2) F Sep 8, 2026
f*e*c*s*v*y.com (WP 7.1) F Sep 8, 2026
o*n*s*r*p*u*.com (WP 7.0.2) F Sep 8, 2026
f*o*m*e*l*g.de F Sep 8, 2026
s*n*y*s.com (WP 7.0.4) F Sep 8, 2026
b*a*d*l*a*o*.com (WP 7.0.4) A Sep 8, 2026
h*g*5*u*d*.com D Sep 8, 2026
v*l*v*e*h*i*h*s.com (WP 7.0.4) F Sep 8, 2026
d*w*g*e*t*.com D Sep 8, 2026
j*r*i*e*i*-*e*o*i*.be F Sep 8, 2026
t*u*v*s*o*m*n*s*r*e*.com (WP 7.0.4) F Sep 8, 2026
b*k*r*r*w*o*s*.net (WP 7.1) F Sep 8, 2026
d*v*u*h*.com (WP 7.1) F Sep 8, 2026
w*r*y*u*w*y*s*.com F Sep 8, 2026
h*l*s*d*v*l*a*e*e*n*.org (WP 7.0.4) A Sep 8, 2026
w*r*e*f*e*i*i*i*y.com F Sep 8, 2026
d*c*c*a.org D Sep 8, 2026
t*u*c*s*o*w*s*i*g*o*.com F Sep 7, 2026
s*m*r*s*l*i*o*a*d.com F Sep 7, 2026
f*i*i*g*g*n*a*l*i*o*s.com F Sep 7, 2026
t*u*k*n*a*s*r*n*e.com (WP 7.1) F Sep 7, 2026
t*u*k*n*a*t*z*n*.com (WP 7.1) F Sep 7, 2026
d*u*w*r*b*u*d.com C Sep 7, 2026
b*a*f*e*d*p*r*s*o*p*e*.c*.uk (WP 7.1) D Sep 7, 2026
a*h*e*m*n*r*r*p.c*.uk F Sep 7, 2026
s*a*d*e*s*a*b*i*g*.c*.uk (WP 7.1) D Sep 7, 2026
m*a*t*w*b.org F Sep 7, 2026
k*r*m*s*o*.com (WP 6.9.5) F Sep 7, 2026
d*t*i*s*p*l*o*o*l*h*m*.com (WP 6.9.7) F Sep 7, 2026
d*t*i*s*p*l*o*k*n*a*.com (WP 6.9.7) F Sep 7, 2026
r*v*e*r.com (WP 7.1) F Sep 7, 2026
m*u*i*s.org D Sep 7, 2026
a*t*m*b*l*-*c*e*b*c*.de (WP 7.1) F Sep 7, 2026
g*u*n*w*l*-*o*h*m.de (WP 7.1) F Sep 7, 2026
r*t*o*o*e*n*n*i*u*s.com (WP 7.1) F Sep 7, 2026
b*u*g*s*u*i*e*s.com (WP 7.0.4) F Sep 7, 2026
m*f*o*s*r*c*i*n.com D Sep 7, 2026
m*f*e*h*a*s.com (WP 7.0.4) F Sep 7, 2026
p*t*u*.org D Sep 7, 2026
r*t*r*a*t*l*a.com (WP 7.0.4) A Sep 7, 2026
h*r*h*e*g*r*o*t*a*t*n*.com (WP 7.1) C Sep 7, 2026
m*c*c*u*c*.com (WP 7.1) C Sep 7, 2026
l*n*u*h*b*s*u*c*a*t.c*.nz F Sep 7, 2026
d*s*t*b*a*h*l*b*k*a*t*v*l*v*n*.com (WP 7.0.4) F Sep 7, 2026
k*n*a*f*r*r*s*e*i*y.com F Sep 7, 2026
b*w*o*p*e*.o*g.uk (WP 7.1) D Sep 7, 2026
p*h*.c*.uk D Sep 7, 2026
p*i*t*e*e*d*i*e*r*s*h*u*a*e*.fr F Sep 6, 2026
a*e*v*s*o*f*r*h*o*d*o*i*i*n.com F Sep 6, 2026
d*s*g*b*s*e*l*.com (WP 7.0.4) F Sep 6, 2026
b*s*h*c*r*s*r*i*e.com (WP 7.1) F Sep 6, 2026
p*l*r*s*e*i*.de (WP 7.1) F Sep 6, 2026
b*r*a*a*n*a*n*.com (WP 6.2.11) F Sep 6, 2026
s*g*s*s*l.com F Sep 6, 2026
s*d*x*i*e*h*c*s.com F Sep 6, 2026
d*r*b*k*s*o*k*.com F Sep 6, 2026
o*k*n*s*o*e*a.com F Sep 6, 2026
h*n*e*s*n*y*d*o*n*a*i*n.com C Sep 6, 2026
r*g*n*c*u*t*e*i*r*i*i*g.com F Sep 6, 2026
d*n*s*i*l*c*o*l.com (WP 7.1) D Sep 6, 2026
r*g*n*y*e*i*e*c*s*y*c*i*e*i*i*g.com (WP 7.0.4) F Sep 6, 2026
a*t*g*n*s*t*u*i*m.ca D Sep 6, 2026
c*l*b*a*i*n*i*l*o*l*r*o.com F Sep 6, 2026
s*d*l*s*a*g*.com F Sep 6, 2026
d*n*i*t*c*m*b*l*t*w*.c*m.au (WP 7.0.4) F Sep 6, 2026
v*c*o*i*g*m*t*.com (WP 7.0.4) F Sep 6, 2026
d*n*n*e*s*o*v*c*a*.com F Sep 6, 2026
e*e*t*a*k*.com F Sep 6, 2026
c*l*i*g*a*.c*.uk (WP 7.1) D Sep 6, 2026
r*f*r*a*e*i*a*g*n*a.com F Sep 6, 2026
q*c.a*.uk D Sep 6, 2026
n*v*h*.com C Sep 5, 2026
e*e*t*n*h*r*e*a*l*.com (WP 7.1) B Sep 5, 2026
g*l*w*b.it (WP 7.1) F Sep 5, 2026
a*u*t*a*g*r*.se (WP 7.1) F Sep 5, 2026
s*r*c*d*m*.org (WP 7.0.4) F Sep 5, 2026
t*a*n*n*s*e*g*e*k.de F Sep 5, 2026
n*w*v*a*t*m*t*v*.com (WP 7.1) F Sep 5, 2026
t*e*s*r*i*e*n*.com F Sep 5, 2026
s*a*i*g*a*l*t*a*s*t.com F Sep 5, 2026
a*a*d*b*i*s*o*s*i*u*n*s*.com (WP 7.1) F Sep 5, 2026
n*t*c*e*t*l*e*l*h.org F Sep 5, 2026
r*d*o*n*a*n*r*h*a*.com F Sep 5, 2026
s*o*m*b*l*t*a*k*.com F Sep 5, 2026
s*o*m*b*l*s*o*k*.com F Sep 5, 2026
w*o*e*a*e*u*p*y.us F Sep 5, 2026
e*r*l*a*u*.com (WP 7.1) D Sep 5, 2026
v*v*d*n*a*s*u*i*.c*.uk (WP 7.1) D Sep 5, 2026
g*o*f*o*4*l*.org F Sep 5, 2026
l*b*r*e*i*.net (WP 7.1) F Sep 5, 2026
c*e*h*m*r*p.c*.uk (WP 7.1) D Sep 5, 2026
s*a*u*r*w*n*c*m*a*y.com (WP 7.1) F Sep 5, 2026
h*a*a*e*r*w*n*.com (WP 7.1) F Sep 5, 2026
k*b*l*l*d*e*a*a*i.com (WP 6.9.7) F Sep 5, 2026
d*m*n*c*i*d*e*s*e*t*s*r*.com F Sep 5, 2026
e*s*g*b*r*a*.com F Sep 4, 2026
o*e*n*c*r*s*c*e*y.o*g.au D Sep 4, 2026
a*s*o*s*r*c*i*n*n*d*s*g*.com (WP 7.1) F Sep 4, 2026