WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: hawat-core (Used by 8 domains)

Security snapshot

Across 8 hawat-core WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 13% Grade B 0% Grade C 0% Grade D 0% Grade F 88%
Fail the header check (F)88%vs 82.5% avg
Leak usernames13%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS100%vs 96.2% avg

What stands out

TLDWP currently associates 8 indexed WordPress sites with hawat-core, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 12.5% versus 38.5% overall (-26 percentage points).

Header-grade F is 87.5% vs 82.5% overall (+5 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).

These are observational associations among sites where TLDWP detected hawat-core, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

hawat-core Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
s*i*s*r*n*n*t*o*k.ch (WP 7.1) F Sep 7, 2026
t*e*c*p*t*l*e*.com F Sep 5, 2026
a*a*i*o*o*e*h.com (WP 7.1) F Sep 3, 2026
l*n*s*n*t*c*n*l*g*.com F Aug 31, 2026
o*w*n*a.ru (WP 6.4.10) F Aug 24, 2026
e*e*a*e*g*o*t*.com F Aug 23, 2026
h*c*e*h*o*o*i*s.uk (WP 7.0.2) F Aug 4, 2026
f*s*t*c*d*m*.com (WP 6.9.4) A Jul 25, 2026