WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: elementskit-widget (Used by 9 domains)

Security snapshot

Across 9 elementskit-widget WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 11% Grade B 0% Grade C 0% Grade D 0% Grade F 89%
Fail the header check (F)89%vs 82.5% avg
Leak usernames67%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS89%vs 96.2% avg

What stands out

TLDWP currently associates 9 indexed WordPress sites with elementskit-widget, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 66.7% versus 38.5% overall (+28.2 percentage points).

HTTPS adoption is 88.9% vs 96.2% overall (-7.3 pp); Header-grade F is 88.9% vs 82.5% overall (+6.4 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).

These are observational associations among sites where TLDWP detected elementskit-widget, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

elementskit-widget Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
n*r*a*l*l*e*i.com (WP 6.5.10) F Sep 5, 2026
e*t*a*a*.com (WP 6.8.8) F Sep 3, 2026
g*b*l*n*b*t*n.com (WP 7.1) F Aug 22, 2026
o*e*e*l*h*h*r*a.net (WP 7.0.4) A Aug 22, 2026
b*r*i*t*r*e*l*h*a*e.com (WP 5.3.23) F Aug 18, 2026
m*r*a*o*m*r*i.com F Jul 31, 2026
g*b*l*n*b*t*n.fr (WP 7.0.2) F Jul 23, 2026
f*l*c*a*r*i*a*.com F Jul 21, 2026
c*r*c*m*a*n*e*.dk (WP 5.5.18) F Jul 18, 2026