Security snapshot
Across 12 goya-tracking WordPress sites indexed by TLDWP, compared to the all-WordPress average.
What stands out
TLDWP currently associates 12 indexed WordPress sites with goya-tracking, equivalent to 0% of the current WordPress dataset.
The largest measured difference is username enumeration: 91.7% versus 38.5% overall (+53.2 percentage points).
Header-grade F is 100% vs 82.5% overall (+17.5 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).
These are observational associations among sites where TLDWP detected goya-tracking, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
goya-tracking Premium / Custom
This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| t*e*c*k.com (WP 6.8.8) | F | Sep 5, 2026 | |
| s*i*l*m*g*z*n*.com (WP 6.8.8) | F | Aug 31, 2026 | |
| h*p*y*o*d*l*f*.com (WP 6.8.8) | F | Aug 31, 2026 | |
| g*o*a*s*a*c*u*o*.com (WP 7.0.4) | F | Aug 26, 2026 | |
| b*e*d*e*m*.com (WP 7.1) | F | Aug 22, 2026 | |
| m*s*c*u*o*.com (WP 7.0.4) | F | Aug 19, 2026 | |
| a*s*a*k*.com (WP 7.0.4) | F | Aug 18, 2026 | |
| p*t*y*u*.com (WP 7.0.4) | F | Aug 16, 2026 | |
| d*y*d*e*m*.com (WP 7.0.2) | F | Jul 24, 2026 | |
| k*p*n*a*.com (WP 7.0.2) | F | Jul 23, 2026 | |
| b*y*n*b*y*o*e.com (WP 7.0.2) | F | Jul 22, 2026 | |
| b*y*s*f*.com (WP 7.0.2) | F | Jul 22, 2026 |