Security snapshot
Across 10 debug-bar WordPress sites indexed by TLDWP, compared to the all-WordPress average.
What stands out
TLDWP currently associates 10 indexed WordPress sites with debug-bar, equivalent to 0% of the current WordPress dataset.
The largest measured difference is username enumeration: 10% versus 38.5% overall (-28.5 percentage points).
Header-grade F is 100% vs 82.5% overall (+17.5 pp); Sensitive-file exposure is 10% vs 1.8% overall (+8.2 pp); HTTPS adoption is 90% vs 96.2% overall (-6.2 pp).
These are observational associations among sites where TLDWP detected debug-bar, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
Debug Bar
Adds a debug menu to the admin bar that shows query, cache, and other helpful debugging information. A must for developers! When WP_DEBUG is enabled it also tracks PHP Warnings and Notices to make them easier to find. When SAVEQUERIES is enabled the mysql queries are tracked and displayed. To enable these options, add the following code to your wp-config.php file: define( 'WP_DEBUG', true ); define( 'SAVEQUERIES', true ); Add a PHP/MySQL console with the Debug Bar Console plugin.…
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| g*d*a*e*.com (WP 5.2.12) | F | Aug 27, 2026 | |
| f*o*a*u*d*f*o*e*s.c*m.au (WP 6.4.10) | F | Aug 18, 2026 | |
| s*u*g*i*c.c*.uk (WP 5.2.12) | F | Aug 8, 2026 | |
| p*o*r*a*e.si (WP 5.2.12) | F | Jul 27, 2026 | |
| c*m*r*2*x*.com (WP 5.2.12) | F | Jul 26, 2026 | |
| p*c*p*p*.com (WP 5.2.12) | F | Jul 25, 2026 | |
| d*s*o*e*s*a*e*o*n*.com (WP 5.2.12) | F | Jul 23, 2026 | |
| b*y*e*o*d*u*b*r.com (WP 5.2.12) | F | Jul 23, 2026 | |
| s*o*b*x*a*k.com (WP 5.2.12) | F | Jul 20, 2026 | |
| m*b*l*v*n.net (WP 5.2.12) | F | Jul 20, 2026 |