Security snapshot
Across 75 image-captcha WordPress sites indexed by TLDWP, compared to the all-WordPress average.
Grade A 0%
Grade B 0%
Grade C 1%
Grade D 4%
Grade F 95%
Fail the header check (F)95%vs 82.5% avg
Leak usernames52%vs 38.5% avg
Expose a sensitive file1.3%vs 1.8% avg
Use HTTPS95%vs 96.2% avg
What stands out
TLDWP currently associates 75 indexed WordPress sites with image-captcha, equivalent to 0% of the current WordPress dataset.
The largest measured difference is username enumeration: 52% versus 38.5% overall (+13.5 percentage points).
Header-grade F is 94.7% vs 82.5% overall (+12.2 pp); HTTPS adoption is 94.7% vs 96.2% overall (-1.5 pp); Sensitive-file exposure is 1.3% vs 1.8% overall (-0.5 pp).
These are observational associations among sites where TLDWP detected image-captcha, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
image-captcha Premium / Custom
This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.
| Domain | Version | Exposures | Headers | Last Checked |
|---|---|---|---|---|
| r*l*p*s*.com (WP 7.1) | — | F | Sep 9, 2026 | |
| c*l*g*o*o*n*g*l*s.es (WP 7.1) | — | D | Sep 9, 2026 | |
| o*i*s*o*-*h.com (WP 7.1) | — | F | Sep 8, 2026 | |
| h*r*u*e*t*l*.com | — | F | Sep 6, 2026 | |
| a*d*o*u*.com (WP 4.9.31) | — | F | Sep 6, 2026 | |
| k*d*n*k.com (WP 4.7.29) | — | F | Sep 6, 2026 | |
| n*s*a*l*u*i*e*s*a*y*r*.com (WP 7.1) | — | F | Sep 6, 2026 | |
| n*c*u*i*e*s*t*o*n*y.com (WP 7.1) | — | F | Sep 6, 2026 | |
| e*e*t*r*m*h*h*a*t.com (WP 6.8.8) | — | F | Sep 5, 2026 | |
| h*a*d*.com | — | F | Sep 4, 2026 | |
| b*d*-*u*i*-*r*a*i*n.com (WP 7.0) | — | F | Sep 4, 2026 | |
| k*e*m*l*c*n*e.com | — | F | Sep 3, 2026 | |
| t*a*e*s*e*w*r*s*o*.com | — | F | Sep 3, 2026 | |
| s*p*r*l*g*e*n*e*y.com (WP 6.0.14) | — | F | Sep 3, 2026 | |
| s*j*h*-*u*d*.com (WP 7.1) | — | F | Sep 1, 2026 | |
| s*n*y*a*p*e*s*n*a*l*n*.com (WP 6.2.11) | — | F | Sep 1, 2026 | |
| a*p*a*o*i*g*e*y*r*.com | — | F | Aug 31, 2026 | |
| j*s*p*p*p*t*o.com (WP 7.1) | — | F | Aug 31, 2026 | |
| s*j*h*-*n*o.com | — | F | Aug 31, 2026 | |
| r*e*h*l*y*r*.com | — | F | Aug 30, 2026 | |
| e*d*r*p*r*b*r*e*o*a.com (WP 5.5.20) | — | F | Aug 29, 2026 | |
| g*s.photo | — | F | Aug 29, 2026 | |
| b*n*o*r*p*e*s.com (WP 5.2.18) | — | F | Aug 29, 2026 | |
| t*n*r*s*i*k*.com (WP 6.9) | — | F | Aug 29, 2026 | |
| b*k*r*y*a*s.com (WP 6.0.14) | — | F | Aug 28, 2026 | |
| 9*1*c*i*e*t*a*y*r.com (WP 7.1) | — | F | Aug 28, 2026 | |
| a*e*s*i*m*d*l*.com (WP 6.9.7) | — | F | Aug 27, 2026 | |
| q*c*s*.com (WP 6.2.8) | — | F | Aug 26, 2026 | |
| q*c*e*u*i*y.com (WP 6.2.8) | — | F | Aug 26, 2026 | |
| b*u*o*k*v.com (WP 7.1) | — | F | Aug 26, 2026 | |
| t*c*m*l.com | — | F | Aug 25, 2026 | |
| a*a*m*a*t*r*u*a.com (WP 6.2.8) | — | F | Aug 25, 2026 | |
| m*q*c.com (WP 6.2.8) | — | F | Aug 23, 2026 | |
| p*o*p*d.com (WP 5.1.8) | — | F | Aug 22, 2026 | |
| 2*2*u*i*e*s*a*y*r.com (WP 7.1) | — | F | Aug 22, 2026 | |
| d*l*t*.ru (WP 7.1) | — | F | Aug 22, 2026 | |
| c*n*c*e*z*.com | — | D | Aug 22, 2026 | |
| i*p*t*c*.com (WP 7.1) | — | F | Aug 21, 2026 | |
| c*o*d*n*e*v.com (WP 6.8.2) | — | F | Aug 20, 2026 | |
| c*u*o.tech | — | F | Aug 19, 2026 | |
| m*i*o*-*u*t*e.fr (WP 4.4.30) | — | F | Aug 18, 2026 | |
| p*r*e*y*.com (WP 5.5.20) | — | F | Aug 18, 2026 | |
| b*n*l*d*s*-*h*p*o*e*t.com | — | F | Aug 16, 2026 | |
| s*n*i*o*.com (WP 5.6.19) | — | F | Aug 15, 2026 | |
| p*t*h*n*p*n*a.com (WP 5.1.24) | — | F | Aug 15, 2026 | |
| m*v*e*2*.com (WP 6.9.7) | — | C | Aug 15, 2026 | |
| c*n*r*t*f*c*s*a*a*i*e.com | — | F | Aug 14, 2026 | |
| m*j*d*c.nl | — | F | Aug 1, 2026 | |
| l*u*e*h*r*n*e*b*r*.com (WP 7.0.2) | — | F | Jul 29, 2026 | |
| n*w*o*k*a*t*t*o*l*w*e*.com (WP 7.0.2) | — | F | Jul 29, 2026 | |
| n*w*o*k*c*i*e*t*t*y.com (WP 7.0.2) | — | F | Jul 29, 2026 | |
| n*w*o*k*u*o*n*u*y*a*y*r*.com (WP 7.0.2) | — | F | Jul 29, 2026 | |
| d*u*k*i*h.com (WP 7.0.2) | — | F | Jul 28, 2026 | |
| l*s*r*o*i*i*n*n*s*s*e*.com (WP 7.0.2) | — | F | Jul 28, 2026 | |
| g*o*t*s*e*r*s*u*.com (WP 5.1.22) | — | F | Jul 28, 2026 | |
| g*o*t*s*d*-*r*s*u*.com (WP 5.1.22) | — | F | Jul 28, 2026 | |
| t*y*o*o*l*n*m*r*e*i*g.com | — | F | Jul 28, 2026 | |
| a*t*i*h*n*r*n.com (WP 7.0.2) | — | F | Jul 27, 2026 | |
| r*b*a*t*b*o*.com (WP 7.0.2) | — | F | Jul 27, 2026 | |
| g*n*r*b*r.net (WP 4.4.2) | — | F | Jul 26, 2026 | |
| j*n*t*a*w*s*h.com (WP 7.0.2) | — | F | Jul 26, 2026 | |
| p*c*e*p*l*t.com (WP 6.8.6) | — | F | Jul 24, 2026 | |
| p*c*f*c*i*d*r*e*s.com (WP 6.8.6) | — | F | Jul 24, 2026 | |
| c*c*s*c*l*e.com | — | F | Jul 24, 2026 | |
| t*e*a*v*r*m*d*a*o*p*r*t*v*.com | — | D | Jul 23, 2026 | |
| r*n*y*n*p*.com | — | F | Jul 23, 2026 | |
| a*t*c*o*l.pl (WP 6.2.9) | — | F | Jul 22, 2026 | |
| b*s*n*s*m*n*y*a*e*s.com (WP 7.0.2) | — | F | Jul 22, 2026 | |
| a*e*z*s*y.com (WP 4.6.20) | — | F | Jul 21, 2026 | |
| b*r*e*o*f*n*i*c.com | — | F | Jul 21, 2026 | |
| i*e*c*-*c*c.com | — | F | Jul 21, 2026 | |
| g*a*d*t*n*m*r*g*g*.com | — | F | Jul 20, 2026 | |
| s*o*l*r*a*n*n*.se (WP 7.0) | — | F | Jul 19, 2026 | |
| s*o*l*r*a*n*n*.com (WP 7.0) | — | F | Jul 19, 2026 | |
| s*o*w*r*i*g.ca | — | F | Jul 18, 2026 |
Page 1 of 1