WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: kff-shared (Used by 8 domains)

Security snapshot

Across 8 kff-shared WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Security metrics currently cover 9 matching records in the cached metrics snapshot.

Grade A 0% Grade B 0% Grade C 0% Grade D 0% Grade F 100%
Fail the header check (F)100%vs 82.5% avg
Leak usernames11%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS89%vs 96.2% avg

What stands out

TLDWP currently associates 8 indexed WordPress sites with kff-shared, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 11.1% versus 38.5% overall (-27.4 percentage points).

Header-grade F is 100% vs 82.5% overall (+17.5 pp); HTTPS adoption is 88.9% vs 96.2% overall (-7.3 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).

These are observational associations among sites where TLDWP detected kff-shared, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Domain Version Exposures Headers Last Checked
k*i*e*h*a*t*n*w*.org (WP 6.8.8) F Aug 26, 2026
k*n.org (WP 6.8.8) F Aug 25, 2026
k*f*e*l*h*e*s.org (WP 6.8.8) F Aug 24, 2026
k*f.org F Aug 24, 2026
s*a*e*e*l*h*a*t*.org F Aug 14, 2026
t*c*o*h*r*l*.com (WP 7.0.2) F Aug 4, 2026
i*s*i*a*i*n*e*s.com (WP 7.0.2) F Jul 25, 2026
k*h*a*t*n*w*.com (WP 6.8.6) F Jul 19, 2026
d*a*n*s*s*d*b*.com (WP 6.8.6) F Jul 18, 2026