WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: envano-legos (Used by 17 domains)

Security snapshot

Across 17 envano-legos WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Security metrics currently cover 18 matching records in the cached metrics snapshot.

Grade A 0% Grade B 0% Grade C 0% Grade D 0% Grade F 100%
Fail the header check (F)100%vs 82.5% avg
Leak usernames17%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS100%vs 96.2% avg

What stands out

TLDWP currently associates 17 indexed WordPress sites with envano-legos, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 16.7% versus 38.5% overall (-21.8 percentage points).

Header-grade F is 100% vs 82.5% overall (+17.5 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).

These are observational associations among sites where TLDWP detected envano-legos, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

envano-legos Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
g*s*p*r*o*.com F Sep 8, 2026
a*c*b*.com F Sep 1, 2026
e*v*n*.com F Aug 31, 2026
w*s*o*s*n*a*k*g*n*.com F Aug 28, 2026
g*p*.com F Aug 26, 2026
g*c*n*a*n*r.com F Aug 25, 2026
g*p.com F Aug 21, 2026
b*i*d*i*p*a*.com F Aug 14, 2026
m*d*a*d*k*.com F Jul 31, 2026
f*y*r*.com F Jul 28, 2026
f*n*n*i*l*e*l*e*s*o*e*i*h*.com F Jul 24, 2026
a*t*x*a*n.com F Jul 23, 2026
v*s*a*t*x.com F Jul 23, 2026
r*n*w*l*y*n*e*s*n*f*r*a*e*w*.com F Jul 22, 2026
r*a*i*w*u*e*.com F Jul 22, 2026
v*s.co F Jul 22, 2026
h*b*r*b*o*h*r*.com F Jul 19, 2026
h*b*r*f*l*e*m*t*l*.com F Jul 19, 2026