Security snapshot
Across 124 css WordPress sites indexed by TLDWP, compared to the all-WordPress average.
Grade A 1%
Grade B 2%
Grade C 15%
Grade D 9%
Grade F 73%
Fail the header check (F)73%vs 82.5% avg
Leak usernames28%vs 38.5% avg
Expose a sensitive file3.2%vs 1.8% avg
Use HTTPS94%vs 96.2% avg
What stands out
TLDWP currently associates 124 indexed WordPress sites with css, equivalent to 0% of the current WordPress dataset.
The largest measured difference is username enumeration: 28.2% versus 38.5% overall (-10.3 percentage points).
Header-grade F is 72.6% vs 82.5% overall (-9.9 pp); HTTPS adoption is 94.4% vs 96.2% overall (-1.8 pp); Sensitive-file exposure is 3.2% vs 1.8% overall (+1.4 pp).
These are observational associations among sites where TLDWP detected css, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
CSS
A simple custom CSS plugin for themes that integrates with the new theme customizer. Warning: Do not use this plugin in an untrusted environment. This plugin currently does not sanitize the CSS. At the moment, itβs really more a proof-of-concept and example than anything else.
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| a*i*w.de (WP 7.1) | F | Sep 9, 2026 | |
| s*o*e*v*.nl | C | Sep 8, 2026 | |
| r*b*o*s*a*p*e*s.com | F | Sep 8, 2026 | |
| h*g*i*p*c*w*b*e*i*n*.com (WP 5.3.23) | F | Sep 8, 2026 | |
| a*g*o*w*t*a*i*o*r*.com | F | Sep 7, 2026 | |
| h*r*z*n*s*m*i*.com (WP 7.1) | F | Sep 7, 2026 | |
| o*e*n*d*a*.com (WP 7.0.4) | F | Sep 7, 2026 | |
| b*s*o*-*h*k*r.com (WP 7.1) | F | Sep 6, 2026 | |
| h*r*o*s*i*u*i*e*.com (WP 5.4.21) | F | Sep 6, 2026 | |
| o*k*e*l*h*l*n*c.com (WP 6.7.1) | F | Sep 6, 2026 | |
| m*r*i*e*o*.com (WP 4.8.1) | F | Sep 6, 2026 | |
| a*a*d*v*l*a.com | F | Sep 5, 2026 | |
| p*i*2*h.tv | C | Sep 4, 2026 | |
| s*o*t*s*a*.io | C | Sep 4, 2026 | |
| r*k*o*.us | C | Sep 4, 2026 | |
| d*3*y*t*m.c*m.au | F | Sep 4, 2026 | |
| t*k*a*a*s*e*l.com (WP 7.1) | F | Sep 4, 2026 | |
| j*e*o.com | F | Sep 4, 2026 | |
| c*r*i*a*a*i*.fr (WP 7.1) | D | Sep 3, 2026 | |
| n*s*r*g*r*e*s.com (WP 6.1.4) | F | Sep 2, 2026 | |
| r*p*c*o*.com (WP 7.0.4) | F | Sep 1, 2026 | |
| o*i*e*r*c*e*.com (WP 6.7.1) | F | Sep 1, 2026 | |
| m*r*e*r*.com (WP 3.8.1) | F | Sep 1, 2026 | |
| c*i*a*o.cn (WP 6.3.2) | F | Aug 31, 2026 | |
| b*a*k*e*w*r*a*s*c*a*e*.com | F | Aug 31, 2026 | |
| c*o*c*r*r*b*o*s.com (WP 7.1) | F | Aug 30, 2026 | |
| s*p*-*a.com | F | Aug 30, 2026 | |
| j*e*a*f*n.com | C | Aug 29, 2026 | |
| x*i*a*.cv | C | Aug 29, 2026 | |
| h*a*o.io | C | Aug 29, 2026 | |
| w*c*e*b*i*z.com | F | Aug 28, 2026 | |
| a*l*a*f*l*a*e*.com | F | Aug 28, 2026 | |
| 9*c*.com (WP 5.2.3) | F | Aug 28, 2026 | |
| b*o*i*k*.com | F | Aug 27, 2026 | |
| c*v*e*.com (WP 6.9.7) | F | Aug 27, 2026 | |
| s*s*.org (WP 7.0.4) | D | Aug 27, 2026 | |
| g*r*t*a*e*t*a*n*n*.com (WP 7.0.4) | F | Aug 27, 2026 | |
| w*l*y*j*l*s*r*m.com (WP 7.0.4) | F | Aug 26, 2026 | |
| e*r*f*g*o*e*p*r*t*.com (WP 7.1) | F | Aug 26, 2026 | |
| e*p*e*o*e*o*i*i*a*.com (WP 4.9.26) | F | Aug 26, 2026 | |
| m*i*e*l*n.com (WP 4.9) | F | Aug 25, 2026 | |
| g*p*o*i*t*c*.com (WP 6.8.3) | F | Aug 25, 2026 | |
| t*a*a*a*g*.com (WP 7.1) | F | Aug 25, 2026 | |
| t*a*a*y*j.com | F | Aug 25, 2026 | |
| w*i*c*.com | D | Aug 24, 2026 | |
| p*l*t*e*o*r*a*i*.com (WP 6.8.8) | F | Aug 24, 2026 | |
| v*r*a*t*n*s*m*n*g*m*n*.de | F | Aug 24, 2026 | |
| l*b*r*y.edu | D | Aug 23, 2026 | |
| s*n*u*n*k*.com (WP 3.5.2) | F | Aug 23, 2026 | |
| l*b*r*y*i*t*r*e*t.com | D | Aug 23, 2026 | |
| l*b*r*y*n*v*r*i*y.com | D | Aug 23, 2026 | |
| a*a*f*r*i*u*e.com (WP 5.8.15) | F | Aug 23, 2026 | |
| b*h*l*i.com (WP 6.1.7) | D | Aug 22, 2026 | |
| l*s*a*i*s*e*z*h*r*.com (WP 7.1) | F | Aug 21, 2026 | |
| b*a*u*a.org (WP 6.7.7) | F | Aug 21, 2026 | |
| v*r*o*u*.com (WP 5.3.23) | F | Aug 21, 2026 | |
| a*i*u*h*o*a*e*a*.com (WP 7.1) | F | Aug 20, 2026 | |
| a*r*d*r*b*e*n*.fr (WP 6.2.2) | B | Aug 20, 2026 | |
| l*a*t*l*c*m.ca | B | Aug 20, 2026 | |
| v*e*r*m*z*.ru | F | Aug 19, 2026 | |
| a*f*t*h*d.com (WP 5.7) | F | Aug 19, 2026 | |
| d*n*-*i.com (WP 7.0.4) | F | Aug 19, 2026 | |
| l*s*a*i*o*d*l*r*a*.com (WP 6.6.7) | F | Aug 18, 2026 | |
| l*a*s*n*e*r*i*g.com | F | Aug 18, 2026 | |
| s*6*e*s*r.com (WP 7.0.4) | F | Aug 18, 2026 | |
| s*6*a*d*t*c*o*.com (WP 7.0.4) | F | Aug 18, 2026 | |
| l*a*t*l*c*m.com | B | Aug 18, 2026 | |
| w*u*h*i*m*.com (WP 7.0.4) | F | Aug 17, 2026 | |
| x*i*a*2*.vip | C | Aug 17, 2026 | |
| s*v*n*i*l*w*r*h*p.com | D | Aug 17, 2026 | |
| i*t*r*s*a.org (WP 7.0.4) | F | Aug 17, 2026 | |
| s*o*o*i*.games (WP 7.0.4) | F | Aug 16, 2026 | |
| w*r*u*l*e*s*a*e*y.pl (WP 7.0.4) | F | Aug 16, 2026 | |
| i*l*m*o.com (WP 7.0.4) | D | Aug 16, 2026 | |
| i*o*o*e*u*o*.com (WP 7.0.4) | F | Aug 15, 2026 | |
| z*f*n.cz (WP 5.2.26) | F | Aug 15, 2026 | |
| x*i*a*.pw | C | Aug 15, 2026 | |
| f*g.c*m.gr (WP 6.2.11) | F | Aug 14, 2026 | |
| x*i*a*.today | C | Aug 9, 2026 | |
| c*n*e*a*a*p*n*.de (WP 6.9.6) | F | Aug 8, 2026 | |
| s*r*d.org | F | Aug 7, 2026 | |
| s*a*t*r*o*i*.io | C | Aug 7, 2026 | |
| o*d*w*l*a*e*.org | F | Aug 6, 2026 | |
| w*i*e*a*s*.io | C | Aug 6, 2026 | |
| t*n*n*i*e*.org (WP 4.3.1) | F | Aug 6, 2026 | |
| o*u*o.io | C | Aug 5, 2026 | |
| j*c*d*w*n*.nl | C | Aug 4, 2026 | |
| w*l*e*e*-*e*y*l*n*.de (WP 7.0.2) | F | Aug 4, 2026 | |
| x*i*a*.hot | C | Aug 3, 2026 | |
| l*v*g*a*.io | C | Aug 3, 2026 | |
| e*o*s*a*e.io | C | Aug 3, 2026 | |
| j*s*.io | C | Aug 2, 2026 | |
| m*k*r*r.com | C | Aug 2, 2026 | |
| l*k*m*.org (WP 5.4.1) | F | Aug 1, 2026 | |
| t*e*c*e*c*j*b*.com | F | Aug 1, 2026 | |
| m*r*a*g*.com (WP 7.0.2) | F | Jul 31, 2026 | |
| f*a*c*i*k*a*i*e.com | F | Jul 31, 2026 | |
| s*i*o*u*k*i*i.c*.jp | F | Jul 30, 2026 | |
| s*l*m*n*r*l*i*h*s*k*a*o*a.com (WP 7.0.2) | F | Jul 30, 2026 | |
| a*s*i.net (WP 5.2.3) | F | Jul 29, 2026 |
Page 1 of 2
Next »