WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: contact-form-to-any-api (Used by 17 domains)

Security snapshot

Across 17 contact-form-to-any-api WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 0% Grade C 12% Grade D 6% Grade F 82%
Fail the header check (F)82%vs 82.5% avg
Leak usernames41%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS100%vs 96.2% avg

What stands out

TLDWP currently associates 17 indexed WordPress sites with contact-form-to-any-api, equivalent to 0% of the current WordPress dataset.

The largest measured difference is HTTPS adoption: 100% versus 96.2% overall (+3.8 percentage points).

Username enumeration is 41.2% vs 38.5% overall (+2.7 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp); Header-grade F is 82.4% vs 82.5% overall (-0.1 pp).

These are observational associations among sites where TLDWP detected contact-form-to-any-api, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

contact-form-to-any-api Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
o*i*n*.com (WP 6.0.14) D Sep 7, 2026
w*t*e*e*p*e*.org F Sep 6, 2026
r*c*r*u*.com (WP 6.7.7) F Sep 4, 2026
c*c*o*t*c*l*e*i*n*.it (WP 5.5.20) C Aug 24, 2026
t*e*2.london F Aug 20, 2026
c*c*o*t*c*l*e*i*n*.com (WP 5.5.20) C Aug 16, 2026
l*n*n*g*r*k*.ru F Aug 16, 2026
b*m*w*r*.ru (WP 4.7.7) F Aug 15, 2026
h*l*o*c*e*n*.io (WP 6.4.10) F Aug 14, 2026
c*l*t*r*l.io F Aug 4, 2026
t*e*w*n*y*w*.com F Aug 1, 2026
i*e*u.com (WP 7.0.2) F Jul 31, 2026
s*z*k*m*t*s.pe (WP 6.5.8) F Jul 30, 2026
d*s*o.me (WP 5.4) F Jul 28, 2026
l*k*w*o*d*n*a*c*i*i*.com F Jul 26, 2026
w*r*d*i*i*e*s*n*t*a*i*e.org F Jul 26, 2026
k*c*n*a*t*.com (WP 6.1.1) F Jul 18, 2026