Security snapshot
Across 4 dplayer-for-wp WordPress sites indexed by TLDWP, compared to the all-WordPress average.
What stands out
TLDWP currently associates 4 indexed WordPress sites with dplayer-for-wp, equivalent to 0% of the current WordPress dataset.
The largest measured difference is username enumeration: 75% versus 38.5% overall (+36.5 percentage points).
HTTPS adoption is 75% vs 96.2% overall (-21.2 pp); Header-grade F is 75% vs 82.5% overall (-7.5 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).
These are observational associations among sites where TLDWP detected dplayer-for-wp, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
DPlayer for WordPress
DPlayer is such a lovely HTML5 danmaku video player by DIYGod, and it’s used on many platforms. Today, DPlayer is coming to WordPress. Usage is rather simple, and here is the template of shortcode we supported. [dplayer url=” pic=” autoplay=”true” danmu=”true”/] Parameter ‘url’ is the source URL to the video file, you can upload the video to your WordPress library, then use it here. Parameter ‘pic’ is the poster of the video. And it’s optional. Parameter ‘autoplay’, a…
| Domain | Version | Exposures | Headers | Last Checked |
|---|---|---|---|---|
| m*m*p*.cn | — | F | Sep 4, 2026 | |
| 1*r*.com | — | F | Aug 22, 2026 | |
| m*c*t.vip (WP 6.4.8) | — | F | Aug 20, 2026 | |
| l*v*w*.club | — | D | Aug 6, 2026 |