Security snapshot
Across 10 ffl-api WordPress sites indexed by TLDWP, compared to the all-WordPress average.
What stands out
TLDWP currently associates 10 indexed WordPress sites with ffl-api, equivalent to 0% of the current WordPress dataset.
The largest measured difference is username enumeration: 60% versus 38.5% overall (+21.5 percentage points).
Header-grade F is 100% vs 82.5% overall (+17.5 pp); HTTPS adoption is 90% vs 96.2% overall (-6.2 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).
These are observational associations among sites where TLDWP detected ffl-api, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
ffl-api Premium / Custom
This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| d*r*s*o*t*r*a*s.com (WP 7.1) | F | Sep 3, 2026 | |
| b*a*k*c*s*a*t*c*l.com (WP 7.1) | F | Aug 31, 2026 | |
| j*p*i*c*n*e*f*r*.com | F | Aug 31, 2026 | |
| p*r*b*l*u*s*d*a*m*.com | F | Aug 17, 2026 | |
| s*n*a*t*c*i*a*.com (WP 7.0.4) | F | Aug 16, 2026 | |
| p*l*a*m*.com | F | Aug 15, 2026 | |
| p*d*c*h*h*o*e*s.com (WP 6.9.4) | F | Jul 31, 2026 | |
| r*w*t*c*i*a*.com (WP 7.0.2) | F | Jul 24, 2026 | |
| s*e*r*t*c*i*a*a*c*i*n*.com (WP 7.0.2) | F | Jul 22, 2026 | |
| a*e*d*f*n*e*x.com (WP 7.0.2) | F | Jul 21, 2026 |