WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: custom-upsell (Used by 11 domains)

Security snapshot

Across 11 custom-upsell WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 0% Grade C 0% Grade D 55% Grade F 45%
Fail the header check (F)45%vs 82.5% avg
Leak usernames55%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS91%vs 96.2% avg

What stands out

TLDWP currently associates 11 indexed WordPress sites with custom-upsell, equivalent to 0% of the current WordPress dataset.

The largest measured difference is header-grade F: 45.5% versus 82.5% overall (-37 percentage points).

Username enumeration is 54.5% vs 38.5% overall (+16 pp); HTTPS adoption is 90.9% vs 96.2% overall (-5.3 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).

These are observational associations among sites where TLDWP detected custom-upsell, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

custom-upsell Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
p*o*v*n*y*.com (WP 7.1) D Aug 22, 2026
p*o*t*t*i*e*l.com (WP 7.0.2) F Aug 22, 2026
s*p*r*h*t*c*.com (WP 7.1) D Aug 20, 2026
g*t*u*e*t*o*i*s.com (WP 7.0.4) D Aug 19, 2026
g*t*r*s*e*t.com (WP 7.0.4) D Aug 18, 2026
g*t*i*i*h*i*s*w.com (WP 7.0.4) D Aug 18, 2026
w*l*f*t*l*t*n*m.com (WP 7.0.4) F Aug 16, 2026
w*l*f*t.com (WP 7.0.4) F Aug 16, 2026
i*e*l*r*s*a*e.com (WP 7.0.2) F Jul 31, 2026
a*o*a*r*o*g*n*c*.com (WP 6.9.4) F Jul 30, 2026
l*r*t*r*z*r.com (WP 7.0) D Jul 28, 2026