WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: iwthemesfw-core (Used by 10 domains)

Security snapshot

Across 10 iwthemesfw-core WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 10% Grade B 0% Grade C 0% Grade D 0% Grade F 90%
Fail the header check (F)90%vs 82.5% avg
Leak usernames30%vs 38.5% avg
Expose a sensitive file20%vs 1.8% avg
Use HTTPS100%vs 96.2% avg

What stands out

TLDWP currently associates 10 indexed WordPress sites with iwthemesfw-core, equivalent to 0% of the current WordPress dataset.

The largest measured difference is sensitive-file exposure: 20% versus 1.8% overall (+18.2 percentage points).

Username enumeration is 30% vs 38.5% overall (-8.5 pp); Header-grade F is 90% vs 82.5% overall (+7.5 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp).

These are observational associations among sites where TLDWP detected iwthemesfw-core, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

iwthemesfw-core Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
o*t*g*n*.c*m.mx (WP 6.9.7) F Aug 28, 2026
l*n*x*a*e.com A Aug 27, 2026
w*b*a*i*w*r*d.com (WP 5.7.17) F Aug 22, 2026
d*c*o*p*p*r*.c*m.pe (WP 6.8.8) F Aug 19, 2026
d*c*a.com (WP 4.9.26) F Aug 16, 2026
i*t*o*t*o*e.com (WP 5.1.19) F Jul 31, 2026
c*p*i*o*t.com (WP 7.0.2) F Jul 28, 2026
h*s*i*g*o*m*a.com (WP 5.4.19) F Jul 22, 2026
h*s*i*g*s*d*g*o*a*p*e*s.com (WP 7.0.2) F Jul 22, 2026
c*a*d*r*i*-*y*t*m*s.com (WP 6.2.9) F Jul 21, 2026