WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: karma-stripe (Used by 7 domains)

Security snapshot

Across 7 karma-stripe WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 0% Grade C 0% Grade D 0% Grade F 100%
Fail the header check (F)100%vs 82.5% avg
Leak usernames43%vs 38.5% avg
Expose a sensitive file42.9%vs 1.8% avg
Use HTTPS100%vs 96.2% avg

What stands out

TLDWP currently associates 7 indexed WordPress sites with karma-stripe, equivalent to 0% of the current WordPress dataset.

The largest measured difference is sensitive-file exposure: 42.9% versus 1.8% overall (+41.1 percentage points).

Header-grade F is 100% vs 82.5% overall (+17.5 pp); Username enumeration is 42.9% vs 38.5% overall (+4.4 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp).

These are observational associations among sites where TLDWP detected karma-stripe, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

karma-stripe Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
m*x*t*p*.com (WP 7.1) F Sep 6, 2026
m*x*f*n*s.com (WP 7.1) F Sep 6, 2026
m*x*f*n*.com (WP 7.1) F Sep 6, 2026
v*l*a*o*t*.org F Aug 19, 2026
n*u*o*y*t*m*c*.org (WP 6.7.7) F Aug 19, 2026
s*m*h.ch (WP 7.0.4) F Aug 19, 2026
e*t*a*e*.ch F Aug 18, 2026