Security snapshot
Across 796 cforms2 WordPress sites indexed by TLDWP, compared to the all-WordPress average.
Security metrics currently cover 792 matching records in the cached metrics snapshot.
What stands out
TLDWP currently associates 796 indexed WordPress sites with cforms2, equivalent to 0% of the current WordPress dataset.
The largest measured difference is header-grade F: 90.5% versus 82.5% overall (+8 percentage points).
Username enumeration is 41.4% vs 38.5% overall (+2.9 pp); Sensitive-file exposure is 3.8% vs 1.8% overall (+2 pp); HTTPS adoption is 94.4% vs 96.2% overall (-1.8 pp).
These are observational associations among sites where TLDWP detected cforms2, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
Infrastructure patterns
Infrastructure detected alongside cforms2. Percentages are within sites where that specific signal was detectable; the baseline compares the same signal across detected WordPress sites overall.
Co-occurrence describes technologies observed on the same sites. Detection coverage varies by signal, and an association does not imply that one technology caused or selected another.
cformsII
This is a fork of cformsII, a highly customizable, flexible and powerful form builder plugin, covering a variety of use cases and features. If you want to use plugin versions older than 14.6.3, you should rename the directory containing the plugin from “cforms2” to “cforms”. But bear in mind that old versions should not be used in public systems, because they contain known serious vulnerabilities that are exploited in the wild. The current security baseline version is 15.0.7. Related…
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| e*i*r*-*a.com (WP 5.2.26) | F | Sep 8, 2026 | |
| h*l*t*p*a*d*n*a*d*r*e*h*u*e*.com | F | Sep 8, 2026 | |
| d*a*c*s.com (WP 6.0.14) | F | Sep 8, 2026 | |
| b*e*k*w*y*i*h*n*c*a*t*r*.com (WP 7.1) | F | Sep 8, 2026 | |
| a*t*n*e*d*t*u*o*.com (WP 4.7.35) | F | Sep 8, 2026 | |
| s*z*c.ru (WP 6.8.2) | F | Sep 8, 2026 | |
| k*t*r*n*r*d*m*v*.com (WP 6.4.10) | F | Sep 8, 2026 | |
| d*v*n*i*e*u*a*i*n.com (WP 4.8.30) | F | Sep 8, 2026 | |
| s*r*h.c*m.au | F | Sep 8, 2026 | |
| d*r*s*i*.ru (WP 7.1) | F | Sep 8, 2026 | |
| i*a*a*e*y.hu (WP 6.4.10) | F | Sep 8, 2026 | |
| s*t*r*y*l*i*k*l*.hu (WP 6.4.3) | F | Sep 8, 2026 | |
| a*o.pt (WP 5.3.23) | F | Sep 8, 2026 | |
| f*n*t*o*e*h*o*o*i*s.com (WP 7.1) | F | Sep 8, 2026 | |
| f*l*e*-*n*i*e.com (WP 6.8.8) | F | Sep 8, 2026 | |
| s*m*s*a*i*n*e*.com | F | Sep 8, 2026 | |
| o*a*a*e*t*a*a*u*n*.com (WP 7.0.4) | D | Sep 8, 2026 | |
| p*t*o*p*o*l*.nl (WP 5.3.2) | F | Sep 7, 2026 | |
| d*v*n*t*e*u*o*r.com | F | Sep 7, 2026 | |
| f*i*f*x*i*t*c*r*.com (WP 7.1) | F | Sep 7, 2026 | |
| m*s*o*t*a*e*x*e*t.com | F | Sep 7, 2026 | |
| w*n*o*o*y*u*p*s*.com (WP 6.3.1) | F | Sep 7, 2026 | |
| m*e*e*.de (WP 6.0.11) | F | Sep 7, 2026 | |
| m*7*e*h.com (WP 7.0.4) | F | Sep 7, 2026 | |
| h*-*n*i*i*u*l*e*-*n*e*a*s*a*.com (WP 6.8.8) | F | Sep 7, 2026 | |
| k*r*v*r.com (WP 7.0.2) | F | Sep 7, 2026 | |
| p*a*t*c*l*c*l*g*.c*m.au (WP 7.1) | F | Sep 7, 2026 | |
| o*d*o*n*s*.com (WP 6.3.10) | F | Sep 7, 2026 | |
| b*u*i*u*t*c*n*g*i*a*e.com | F | Sep 7, 2026 | |
| t*i*e*h*n*.com (WP 7.1) | F | Sep 7, 2026 | |
| t*i*t*t*c*e*s.com | F | Sep 7, 2026 | |
| m*g*a*h*x*i*n*.com (WP 7.1) | F | Sep 7, 2026 | |
| k*n*r*d*i*a*i*n*.com (WP 5.3.18) | F | Sep 7, 2026 | |
| t*u*h*i*e*t*r*.org (WP 7.1) | F | Sep 7, 2026 | |
| d*e*a.hu (WP 6.3.10) | F | Sep 7, 2026 | |
| s*l*i*o.com (WP 5.3.2) | F | Sep 7, 2026 | |
| j*t*.org (WP 6.7.7) | F | Sep 7, 2026 | |
| a*g*l*c*h*t*l.com | F | Sep 7, 2026 | |
| b*b*-*e*.ru | F | Sep 6, 2026 | |
| t*i*n*z*l*.com | F | Sep 6, 2026 | |
| a*d*.pro | F | Sep 6, 2026 | |
| k*k*l*r*u*e.com | F | Sep 6, 2026 | |
| s*r*i*.c*.jp (WP 4.9.26) | F | Sep 6, 2026 | |
| g*u*n*a*m.ch (WP 7.1) | F | Sep 6, 2026 | |
| g*r*a*-*o*o*m*s*e*s.de (WP 7.1) | F | Sep 6, 2026 | |
| m*y*r*f*d*l.com | F | Sep 6, 2026 | |
| t*i*t*c*c*c.com (WP 7.1) | F | Sep 6, 2026 | |
| c*p*d*s*b.ru (WP 5.0.22) | F | Sep 6, 2026 | |
| r*p*b*i*u*d.com | F | Sep 6, 2026 | |
| h*l*r*g*n*.com | F | Sep 6, 2026 | |
| v*l*a*e*f*o*v*y.com | F | Sep 6, 2026 | |
| k*l*s*-*r*e*d*.com (WP 6.9.7) | F | Sep 6, 2026 | |
| h*l*e*s*e*r*p*.com (WP 7.1) | F | Sep 6, 2026 | |
| n*b*r*a*m*t*v*h*.com (WP 7.1) | F | Sep 6, 2026 | |
| m*x*m*-*n*-*o.com (WP 6.9.7) | F | Sep 6, 2026 | |
| b*g*h*d*u*t*m*.c*.nz | D | Sep 6, 2026 | |
| o*h*a*-*s*.org (WP 7.1) | C | Sep 5, 2026 | |
| m*u*i*e*r*a*d*o.com (WP 5.2.26) | F | Sep 5, 2026 | |
| m*u*a*r*i*i*.com (WP 7.1) | F | Sep 5, 2026 | |
| d*l*h*l*o*h*r*z*n.com (WP 7.1) | F | Sep 5, 2026 | |
| b*n*m*o*t.com (WP 7.1) | F | Sep 5, 2026 | |
| f*r*l*r*s*m*o*.is (WP 7.0.4) | F | Sep 5, 2026 | |
| s*o*d*n*r*d*e*o*e*.com | F | Sep 5, 2026 | |
| h*a*t*f*h*a*t*s*.org (WP 6.9.7) | D | Sep 5, 2026 | |
| r*n*t*t*p*o*o*r*p*y.com | F | Sep 5, 2026 | |
| u*w*s.com | F | Sep 5, 2026 | |
| e*r*n*a*e*v*c*s.com | F | Sep 5, 2026 | |
| f*n*a*j*l*t*o.pl (WP 5.6.2) | F | Sep 5, 2026 | |
| k*d*i*c*e*.com (WP 4.8.25) | F | Sep 5, 2026 | |
| s*e*o*d*g*m*a*i*m.de (WP 6.9.7) | F | Sep 5, 2026 | |
| k*c*e*m*i*.com | F | Sep 5, 2026 | |
| r*l*i*s*f*w*r*.com (WP 5.3.23) | D | Sep 4, 2026 | |
| u*-*r*n*.ru | F | Sep 4, 2026 | |
| d*e*m*e*v*r*e*m.com | F | Sep 4, 2026 | |
| f*m*o*u*i*n.com | F | Sep 4, 2026 | |
| l*t*m*s*e*c*i*e*.fr (WP 7.1) | F | Sep 4, 2026 | |
| r*c*c*a*a*t.com (WP 6.5.10) | F | Sep 4, 2026 | |
| b*d*l*u*a*d*v*d.com (WP 7.1) | F | Sep 4, 2026 | |
| t*a*s*o*m*r*i*g*.com | F | Sep 4, 2026 | |
| t*a*s*o*m*r*i*g.com | F | Sep 4, 2026 | |
| z*r*o*a*t.com | F | Sep 4, 2026 | |
| a*i*o*d*p*v*.com (WP 4.9.26) | F | Sep 4, 2026 | |
| n*t*a*h.de (WP 7.1) | F | Sep 4, 2026 | |
| d*f*h*m*s.com | F | Sep 4, 2026 | |
| t*a*n*n*t*r*a*u.com (WP 6.9.7) | F | Sep 3, 2026 | |
| t*a*n*n*p*s*i*a*a*.com (WP 6.8.8) | F | Sep 3, 2026 | |
| t*a*n*n*a*u*t*n*i.com (WP 6.8.8) | F | Sep 3, 2026 | |
| t*a*n*n*-*n*u*t*i*i*i*.com (WP 6.8.8) | F | Sep 3, 2026 | |
| t*a*n*n*-*u*u*s*m.com (WP 7.0.4) | F | Sep 3, 2026 | |
| f*n*a*i*n*b*a*r*c*-*c*o*b*r*.org (WP 4.9.3) | F | Sep 3, 2026 | |
| x*a*l*c.com (WP 7.1) | F | Sep 3, 2026 | |
| o*c*r*j*c*o*r*n*a*.com | F | Sep 3, 2026 | |
| s*a*t*n*i*e*r*n*s*s.com (WP 7.1) | F | Sep 3, 2026 | |
| m*s*h*k*-*a*o.com (WP 7.1) | F | Sep 3, 2026 | |
| z*k*l*k*s.com (WP 7.1) | F | Sep 3, 2026 | |
| n*v*l*o*a*s*l*b.com (WP 7.0.4) | F | Sep 3, 2026 | |
| e*o*r*.com | F | Sep 3, 2026 | |
| e*m*v*d*.com (WP 7.1) | F | Sep 3, 2026 | |
| c*t*h*o*t*u*i*.com (WP 7.1) | F | Sep 3, 2026 | |
| e*l*e*c*e*r*c*u*t*r.com (WP 6.8.8) | F | Sep 3, 2026 |