WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: hugge-core (Used by 12 domains)

Security snapshot

Across 12 hugge-core WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 8% Grade C 0% Grade D 8% Grade F 83%
Fail the header check (F)83%vs 82.5% avg
Leak usernames25%vs 38.5% avg
Expose a sensitive file8.3%vs 1.8% avg
Use HTTPS100%vs 96.2% avg

What stands out

TLDWP currently associates 12 indexed WordPress sites with hugge-core, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 25% versus 38.5% overall (-13.5 percentage points).

Sensitive-file exposure is 8.3% vs 1.8% overall (+6.5 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp); Header-grade F is 83.3% vs 82.5% overall (+0.8 pp).

These are observational associations among sites where TLDWP detected hugge-core, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

hugge-core Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
e*p*n*s*p*e*.com F Sep 3, 2026
h*m*.be D Aug 24, 2026
e*t*a*a*.com (WP 7.0.4) F Aug 21, 2026
s*c*i*a*-*t*d*o.com F Jul 28, 2026
a*e*i*r*r*p*y*u*.com F Jul 28, 2026
i*t*r*i*e*.com (WP 6.8.3) F Jul 26, 2026
m*d*h*n*y.store (WP 7.0.2) F Jul 25, 2026
j*e*b*l*g*m.pt (WP 7.0.2) F Jul 25, 2026
d*n*m*r*d*.com F Jul 23, 2026
m*t*t*p*.com (WP 7.0.2) F Jul 21, 2026
u*s*s*o*.com (WP 6.8.1) B Jul 21, 2026
e*t*a*a*.fr (WP 7.0) F Jul 18, 2026