WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: donation-can (Used by 8 domains)

Security snapshot

Across 8 donation-can WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 0% Grade C 0% Grade D 38% Grade F 63%
Fail the header check (F)63%vs 82.5% avg
Leak usernames25%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS88%vs 96.2% avg

What stands out

TLDWP currently associates 8 indexed WordPress sites with donation-can, equivalent to 0% of the current WordPress dataset.

The largest measured difference is header-grade F: 62.5% versus 82.5% overall (-20 percentage points).

Username enumeration is 25% vs 38.5% overall (-13.5 pp); HTTPS adoption is 87.5% vs 96.2% overall (-8.7 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).

These are observational associations among sites where TLDWP detected donation-can, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

donation-can Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
a*a*c*m*d*i*h*l*.com (WP 7.1) F Sep 2, 2026
p*o*i*i*n*i*i*t*i*s.com (WP 7.0.4) F Aug 22, 2026
i*l*m*c*o*e*l*o*.com F Jul 29, 2026
t*e*r*d*o.net (WP 6.9.5) D Jul 29, 2026
c*i*e*o*i*i.com D Jul 23, 2026
r*e*e*r*i*b*w.org D Jul 20, 2026
m*n*t*p*.org (WP 6.4.8) F Jul 20, 2026
n*o*.org (WP 4.4.2) F Jul 18, 2026