WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: df-flipcard (Used by 11 domains)

Security snapshot

Across 11 df-flipcard WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 0% Grade C 0% Grade D 0% Grade F 100%
Fail the header check (F)100%vs 82.5% avg
Leak usernames36%vs 38.5% avg
Expose a sensitive file27.3%vs 1.8% avg
Use HTTPS100%vs 96.2% avg

What stands out

TLDWP currently associates 11 indexed WordPress sites with df-flipcard, equivalent to 0% of the current WordPress dataset.

The largest measured difference is sensitive-file exposure: 27.3% versus 1.8% overall (+25.5 percentage points).

Header-grade F is 100% vs 82.5% overall (+17.5 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp); Username enumeration is 36.4% vs 38.5% overall (-2.1 pp).

These are observational associations among sites where TLDWP detected df-flipcard, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

df-flipcard Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
c*l*a*d*i*.ie (WP 4.9.5) F Sep 8, 2026
s*a*y.com F Sep 3, 2026
s*a*y.se F Aug 28, 2026
c*u*d*s*s*r*s.com F Aug 21, 2026
m*n*o*n*o*a.hu (WP 4.9.26) F Aug 10, 2026
t*i*r*y*h*c*l*t*s.com (WP 5.1.22) F Aug 1, 2026
a*t*s*s*o*l*g*t.org (WP 6.7.2) F Jul 27, 2026
l*c*l*u*a*a*u*i.com (WP 6.4.8) F Jul 25, 2026
l*c*l*u*a*s*l*m*.com (WP 6.4.8) F Jul 25, 2026
a*t*s*f*r*i*h*.com (WP 6.7.2) F Jul 24, 2026
o*i*n*b*l*b*k*r*.com (WP 7.0.2) F Jul 21, 2026