WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: desert-core (Used by 13 domains)

Security snapshot

Across 13 desert-core WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 8% Grade B 8% Grade C 0% Grade D 0% Grade F 85%
Fail the header check (F)85%vs 82.5% avg
Leak usernames23%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS100%vs 96.2% avg

What stands out

TLDWP currently associates 13 indexed WordPress sites with desert-core, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 23.1% versus 38.5% overall (-15.4 percentage points).

HTTPS adoption is 100% vs 96.2% overall (+3.8 pp); Header-grade F is 84.6% vs 82.5% overall (+2.1 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).

These are observational associations among sites where TLDWP detected desert-core, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

desert-core Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
s*w*b*u*h*a*a*.com (WP 7.0.4) F Sep 9, 2026
s*n*i*g*e*t*.com (WP 6.9.7) B Aug 16, 2026
d*u*k*i*h*e*l*g.com (WP 6.9.1) F Aug 16, 2026
s*b*s*.c*.za (WP 5.7.14) F Aug 4, 2026
t*v*m*k.com (WP 6.0.1) F Aug 4, 2026
d*e*e*s.life F Aug 3, 2026
f*e*l*f*n*.com (WP 4.9.26) F Jul 31, 2026
s*l*i*s*o*c*i.com (WP 6.9.4) F Jul 30, 2026
v*y*g*u*-*n*e*e*d*n*.com (WP 7.0.2) A Jul 29, 2026
p*z*i*.com F Jul 26, 2026
v*r*f*a*e.com (WP 7.0.2) F Jul 26, 2026
f*t*a*w*i*e*.com (WP 7.0.2) F Jul 20, 2026
c*a*l*t*e*b*c*c*e*t*.com F Jul 20, 2026