Security snapshot
Across 552 checkout-upsell-and-order-bumps WordPress sites indexed by TLDWP, compared to the all-WordPress average.
What stands out
TLDWP currently associates 552 indexed WordPress sites with checkout-upsell-and-order-bumps, equivalent to 0% of the current WordPress dataset.
The largest measured difference is username enumeration: 28.2% versus 38.5% overall (-10.3 percentage points).
Header-grade F is 78.9% vs 82.5% overall (-3.6 pp); Sensitive-file exposure is 3.5% vs 1.8% overall (+1.7 pp); HTTPS adoption is 95.5% vs 96.2% overall (-0.7 pp).
These are observational associations among sites where TLDWP detected checkout-upsell-and-order-bumps, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
UpsellWP
The #1 WooCommerce upsell plugin trusted by 4,000+ stores to dramatically increase average order value and boost sales effortlessly. Tired of watching customers leave with just buying one item? UpsellWP solves this by strategically placing irresistible offers throughout your customer’s journey. Suggest relevant products at precisely the right moments – from product pages to checkout completion. Buy…
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| k*t*k*f.com (WP 7.1) | F | Sep 8, 2026 | |
| s*u*a*.com (WP 7.1) | F | Sep 8, 2026 | |
| d*z*q*.com (WP 7.1) | F | Sep 8, 2026 | |
| a*n*p*s*e*k*.com (WP 7.1) | F | Sep 8, 2026 | |
| s*n*o*i.com | F | Sep 8, 2026 | |
| b*a*t*u*d*s.com (WP 7.0.4) | C | Sep 7, 2026 | |
| b*a*t*p*a*e*.com (WP 7.0.4) | C | Sep 7, 2026 | |
| l*v*a*u*e.ch | F | Sep 7, 2026 | |
| s*m*r*r*r*a*e*r*n*.com (WP 7.0.4) | F | Sep 7, 2026 | |
| o*l*w*.com (WP 7.1) | F | Sep 7, 2026 | |
| k*r*k*r*e*.com | F | Sep 7, 2026 | |
| d*v*u*x*h*t*g*a*h*.com | F | Sep 7, 2026 | |
| k*n*j*u*t*b.com (WP 7.1) | F | Sep 7, 2026 | |
| o*e*o*e.com (WP 7.1) | F | Sep 7, 2026 | |
| r*t*r*t*d*r*t*w*r.com | C | Sep 7, 2026 | |
| o*d*e*s*y*e.com (WP 7.1) | D | Sep 7, 2026 | |
| a*g*y*t*g.com (WP 7.0.4) | F | Sep 7, 2026 | |
| d*s*i*a*i*n*u*u*n.com (WP 7.1) | F | Sep 7, 2026 | |
| z*a*k*t*i*g*h*p.eu | F | Sep 7, 2026 | |
| m*d*a*e*.c*.nz | F | Sep 7, 2026 | |
| d*s*i*o*m*t*c*.com (WP 7.1) | F | Sep 7, 2026 | |
| e*c*s*w*a*.com (WP 6.7.2) | F | Sep 7, 2026 | |
| o*e*n*d*i*t*l*m*o*.com (WP 7.1) | F | Sep 7, 2026 | |
| m*a*t*a*k*r.com (WP 6.6.7) | F | Sep 7, 2026 | |
| e*g*i*h*i*e*a*m*k*u*.c*.uk | F | Sep 7, 2026 | |
| a*g*l*k*m*u*e*.com (WP 7.1) | F | Sep 7, 2026 | |
| w*r*a*d*u*z*s*a*e*y.com (WP 7.1) | F | Sep 7, 2026 | |
| r*s*o*a*i*n*a*e*.com | C | Sep 7, 2026 | |
| o*t*o*o*b*e*s*n*s.com (WP 7.1) | F | Sep 6, 2026 | |
| c*a*t*n*u*t*y*l*i*n*e.com | F | Sep 6, 2026 | |
| g*t*o*a*.com | F | Sep 6, 2026 | |
| e*o*j*p*u*.com (WP 7.1) | F | Sep 6, 2026 | |
| t*i*s*i*c*i*s.com (WP 7.0.4) | F | Sep 6, 2026 | |
| t*i*n*u*o*e*a*i*u*z*.com (WP 7.1) | F | Sep 6, 2026 | |
| m*m*l*.it (WP 7.1) | F | Sep 6, 2026 | |
| m*n*y*.c*m.au (WP 7.1) | F | Sep 6, 2026 | |
| c*e*t*i*d*g*t*l.com (WP 7.1) | F | Sep 6, 2026 | |
| a*d*e*i.com (WP 7.1) | F | Sep 6, 2026 | |
| e*p*c*-*a*i*g*s.fr | F | Sep 5, 2026 | |
| m*s*u*a.pl (WP 7.1) | F | Sep 5, 2026 | |
| y*y*m*d*.com (WP 7.1) | B | Sep 5, 2026 | |
| h*l*n*m*r*a*z*d*s.com (WP 7.0.4) | F | Sep 5, 2026 | |
| b*i*g*m*n*a*i*y.com (WP 7.1) | F | Sep 5, 2026 | |
| d*n*a*o*t*.com | C | Sep 5, 2026 | |
| d*n*s*p*u*h*s.com | F | Sep 5, 2026 | |
| d*n*s*.com | F | Sep 5, 2026 | |
| l*t*l*e*-*o*a*d*e*b*.fr (WP 7.0.4) | F | Sep 5, 2026 | |
| m*t*s*o*k*e*.com | B | Sep 5, 2026 | |
| d*n*s*n*v*k*v*.com | F | Sep 5, 2026 | |
| s*l*p*j*k*w*i*b*e.pl (WP 7.1) | F | Sep 5, 2026 | |
| s*a*k*s*a*k.com (WP 7.0.4) | F | Sep 5, 2026 | |
| a*t*s*a*t*o*.o*g.uk | C | Sep 5, 2026 | |
| r*c*e*d*s*n*s*.com (WP 7.1) | F | Sep 5, 2026 | |
| s*i*h*n*i*o*c*i*g.com (WP 7.1) | F | Sep 4, 2026 | |
| h*a*t*y*u*t*e*a*t*r*i*d.com | F | Sep 4, 2026 | |
| r*c*l*e*p*o*r*m.com (WP 6.7.2) | F | Sep 4, 2026 | |
| d*g*e*s*r*e*.pl (WP 7.0) | D | Sep 4, 2026 | |
| a*i*m*d*.com (WP 7.1) | F | Sep 4, 2026 | |
| a*i*r*b.com (WP 7.1) | F | Sep 4, 2026 | |
| b*o*t*n*t*i*i*n.com (WP 7.1) | F | Sep 4, 2026 | |
| s*p*r*o*r*t*r*n*i*e.c*m.br | F | Sep 4, 2026 | |
| b*b*o*i*.com | F | Sep 3, 2026 | |
| f*m*w*y*.com (WP 6.6.7) | F | Sep 3, 2026 | |
| k*a*i*m*d*l*a.com (WP 7.1) | F | Sep 3, 2026 | |
| c*i*a*d*o.com (WP 6.7.7) | F | Sep 3, 2026 | |
| c*i*e*-*d*a*l*a.com (WP 7.1) | F | Sep 3, 2026 | |
| t*a*k*a*s*b*l*a*i*.com (WP 6.8.8) | F | Sep 3, 2026 | |
| c*l*a*e*l*f*p*r*s.c*.za | F | Sep 3, 2026 | |
| s*u*p*f*.com | B | Sep 3, 2026 | |
| s*v*o*r*a*y*n*.org (WP 7.0.4) | D | Sep 3, 2026 | |
| b*u*d*h*i*w*o*e*f*o*a*s.com (WP 7.1) | F | Sep 3, 2026 | |
| b*u*d*h*i*d*s*g*s*e.com (WP 7.1) | F | Sep 3, 2026 | |
| n*t*l*c*.com (WP 6.5.5) | F | Sep 2, 2026 | |
| t*x*s*r*i*f*s*i*a*.com (WP 7.1) | F | Sep 2, 2026 | |
| t*w*r*i*i*i*.com | F | Sep 2, 2026 | |
| b*o*m*s*a*l.com (WP 7.1) | D | Sep 2, 2026 | |
| t*t*o*.com | C | Sep 2, 2026 | |
| t*t*o*.com | C | Sep 2, 2026 | |
| c*r*c*l*.com | F | Sep 2, 2026 | |
| e*p*w*r*d*i*e*a*i*n.com (WP 7.1) | F | Sep 2, 2026 | |
| j*i*o*h*s.com | F | Sep 2, 2026 | |
| e*o*u*d*.com | F | Sep 1, 2026 | |
| p*u*a*h*a*.pl | F | Sep 1, 2026 | |
| a*w*y*a*r*l.com (WP 7.1) | F | Sep 1, 2026 | |
| b*r*a*l.bg | F | Sep 1, 2026 | |
| h*l*o*o.c*.uk | B | Sep 1, 2026 | |
| x*p*p*i*e*.com (WP 7.1) | F | Sep 1, 2026 | |
| o*v*h*t*.com | F | Sep 1, 2026 | |
| s*i*k*r.ninja (WP 7.0.2) | F | Sep 1, 2026 | |
| a*t*r*a*i*e*u*l*e*c*.com (WP 6.8.8) | F | Sep 1, 2026 | |
| t*r*h*a*i*y*i*i*g.com (WP 7.1) | F | Sep 1, 2026 | |
| a*a*e*i*s*m*l*.com (WP 7.1) | F | Sep 1, 2026 | |
| s*i*k*y.pl (WP 6.9.7) | F | Aug 31, 2026 | |
| e*o*a*a*l.com | D | Aug 31, 2026 | |
| l*n*s*a*d*n*.com (WP 7.1) | F | Aug 31, 2026 | |
| m*l*a*e*b*o*k*r.c*.uk (WP 7.1) | F | Aug 31, 2026 | |
| c*d*f*i*a.com | F | Aug 31, 2026 | |
| r*v*n*e*o*d*h*p.com (WP 7.1) | F | Aug 31, 2026 | |
| a*s*l*t*r*f*i*e*a*t*.com (WP 7.1) | F | Aug 31, 2026 | |
| l*n*w*l*c*a*t*t*d*o.com (WP 6.9.7) | F | Aug 31, 2026 |