WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: masks-form-fields (Used by 1,184 domains)

Security snapshot

Across 1,184 masks-form-fields WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 1% Grade B 2% Grade C 3% Grade D 10% Grade F 83%
Fail the header check (F)83%vs 82.5% avg
Leak usernames29%vs 38.5% avg
Expose a sensitive file2%vs 1.8% avg
Use HTTPS96%vs 96.2% avg

What stands out

TLDWP currently associates 1,184 indexed WordPress sites with masks-form-fields, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 28.9% versus 38.5% overall (-9.6 percentage points).

Header-grade F is 83.3% vs 82.5% overall (+0.8 pp); HTTPS adoption is 95.9% vs 96.2% overall (-0.3 pp); Sensitive-file exposure is 2% vs 1.8% overall (+0.2 pp).

These are observational associations among sites where TLDWP detected masks-form-fields, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Masks Form Fields

👤 Petermann 🔗 Plugin Homepage

Add a class in the form field. Example of use with Contact Form 7: [tel your-phone class:phone placeholder "Phone"] Listing of classes available for use. ('span.start, input.start').mff_mask('00/0000'); ('span.date, input.date').mff_mask('00/00/0000'); ('span.time, input.time').mff_mask('00:00:00'); ('span.time2, input.time2').mff_mask('00:00'); ('input.date_time').mff_mask('00/00/0000 00:00:00'); ('input.date_time2').mff_mask('00/00/0000 00:00'); ('input.cep').mff_mask('00000-000', { clearIfNotMatch: true })…

Domain Exposures Headers Last Checked
b*u*i*u*o*g*n*z*r.com D Sep 7, 2026
t*i*o*m*d*c*l*r*u*.com (WP 7.0.4) F Sep 7, 2026
c*n*e*d*m*m*b*a*i*.c*m.br (WP 7.1) D Sep 7, 2026
y*s*y*u*b*g*d*.com F Sep 7, 2026
l*z*n*-*u*o*t*p*.ru F Sep 7, 2026
r*t*p*e*e.com (WP 7.1) F Sep 7, 2026
m*p*a*e*f*i*e*r*o.c*m.br (WP 7.1) F Sep 7, 2026
m*a*l*y*a*i*y*h*r*p*a*t*c.com F Sep 7, 2026
y*k*l*u*a.com (WP 7.1) F Sep 7, 2026
b*t*m*d*.com (WP 7.1) F Sep 7, 2026
b*t*m*d*c*.com (WP 7.1) F Sep 7, 2026
r*z*-*d*r*v*a.ru D Sep 7, 2026
o*a*e*a.com (WP 7.1) F Sep 7, 2026
k*m*e*c*e*k*j*t*a*s*o*t*v*l*z*n*0*.ru F Sep 7, 2026
k*m*e*c*e*k*j*t*a*s*o*t*v*l*z*n*0*.ru F Sep 7, 2026
y*r*e*i*c.com F Sep 7, 2026
c*c*f*r*o*p*l*a.c*m.br (WP 7.1) F Sep 7, 2026
a*l*s*r*d*c*e*.c*m.br (WP 7.1) F Sep 7, 2026
m*m*p*p*a*e.com (WP 6.5.10) F Sep 6, 2026
m*e*e*e*r*n*.o*g.br (WP 7.1) F Sep 6, 2026
n*r*a*o*e*d*l*v*o.c*m.br (WP 7.1) F Sep 6, 2026
b*s*i*r*l*w.com F Sep 6, 2026
m*n*o*i*d*v*z.c*m.br (WP 7.1) F Sep 6, 2026
b*s*s.o*g.br (WP 7.1) F Sep 6, 2026
s*a*e*r*g*a*c*.c*m.br (WP 7.0.4) F Sep 6, 2026
e*i*o*a*r*l*o*o*e*i*o.c*m.br F Sep 6, 2026
h*r*e*t*u*.com F Sep 6, 2026
k*k*m*.com (WP 7.1) F Sep 6, 2026
s*k*l*f*.ca F Sep 6, 2026
m*y*t*i*y*.com (WP 7.1) F Sep 6, 2026
o*k*o*t*a*e*o*p.com F Sep 6, 2026
l*m*r*n*a*e*t.org F Sep 6, 2026
m*t*b*t*4.ru (WP 6.7.7) F Sep 6, 2026
b*a*m*t*l*i*e*r*.c*m.br (WP 7.0.3) F Sep 6, 2026
o*d*s*t*s.c*m.br (WP 7.1) F Sep 6, 2026
o*g*n*e.com (WP 7.1) F Sep 6, 2026
v*l*t*a*p*l*m.c*m.br D Sep 6, 2026
o*m*c*l*d*c*r*c*o*r*u*f*r*.c*m.br F Sep 6, 2026
n*t*x*r*e*o*d*.com F Sep 6, 2026
a*u*r*l*g*n*i*.c*m.br (WP 7.1) F Sep 6, 2026
l*g*i*e*t.pl (WP 7.0.2) F Sep 6, 2026
n*m*n*b*n*s.com F Sep 6, 2026
m*k*v.c*m.br (WP 7.1) F Sep 6, 2026
d*n*i*g*e*r*e*c*i*g*o*g*.com F Sep 6, 2026
s*g*r*e*i*.ru (WP 7.0.4) F Sep 6, 2026
e*e*e*t*h*l*r*n*d*n*i*t.com F Sep 6, 2026
e*e*e*t*h*l*r*n*d*n*a*.com F Sep 6, 2026
d*s*i*o*l*r*p*.c*m.br F Sep 6, 2026
r*p*e*i*h*a.com F Sep 6, 2026
r*p*s*e*a*r*c*f*.com C Sep 6, 2026
a*d*l*q*e*s*e*a*.com (WP 7.1) F Sep 6, 2026
a*e*s*f*w*r*.c*m.br (WP 6.8.8) D Sep 6, 2026
b*s*k*r*a*i*e*t*l*.ru (WP 7.1) F Sep 5, 2026
b*o*f*i*b*a*i*.com (WP 7.0.4) F Sep 5, 2026
m*u*i*i*b*r*e*.com (WP 7.1) D Sep 5, 2026
m*u*i*i*a*t*r*e*g*r.com (WP 7.1) D Sep 5, 2026
s*t*a*o*t*g.ru F Sep 5, 2026
m*u*g*y*.com F Sep 5, 2026
m*t*l*s*a*f*r*.com F Sep 5, 2026
b*r*a*o*n*s*o*p*n*.c*m.br F Sep 5, 2026
d*x*i*i*a*.c*m.br (WP 7.0.4) B Sep 5, 2026
b*d*o*s.org F Sep 5, 2026
s*r*n*w*.c*m.br F Sep 5, 2026
r*d*u*i*e*.com (WP 6.9.4) C Sep 5, 2026
r*d*d*m*e*r*.com F Sep 5, 2026
a*e*c*a*u*t*i*k*.c*m.br (WP 7.1) F Sep 5, 2026
m*l*l*n*s.c*m.br (WP 7.1) F Sep 5, 2026
d*n*m*c*s*f*w*r*-*o*u*i*n*.com (WP 7.1) F Sep 5, 2026
h*b*r*r*o*e*l*c.com (WP 7.0.4) F Sep 5, 2026
a*y*r*e*e.com F Sep 5, 2026
b*l*n*i*m.com (WP 7.1) F Sep 5, 2026
r*c*v*r*l*w*r*u*.com (WP 7.1) F Sep 4, 2026
b*i*e*u*o*c*i*e*t.com F Sep 4, 2026
r*m.c*m.br (WP 7.1) D Sep 4, 2026
m*n*k*n*u*.ru B Sep 4, 2026
r*c*f*a*t*m*r*a*.com C Sep 4, 2026
n*s*o*e*m*r*v*m*n*.com (WP 7.0.4) F Sep 4, 2026
c*r*i*i*a*a*a*e*s.o*g.br (WP 6.4.2) F Sep 4, 2026
a*o*s*.com (WP 6.9.7) F Sep 4, 2026
s*i*e*g*n*w*l*p*o*o*o*t*s.com F Sep 4, 2026
m*s*c*.com F Sep 4, 2026
t*z*r*n*.com F Sep 4, 2026
d*u*d*f*n*s.com F Sep 4, 2026
t*r*o*t*l*a.com F Sep 4, 2026
r*b*l*n*.com (WP 7.0.4) F Sep 4, 2026
b*b*o*m.com (WP 7.1) F Sep 4, 2026
z*t*i*e*g*n*a*i*.com F Sep 4, 2026
e*e*r*s.o*g.br (WP 7.1) F Sep 4, 2026
a*d*c*i*n*r*a*m*n*n*s*v*l*e.com F Sep 4, 2026
a*d*c*i*n*r*a*m*n*c*m.com F Sep 4, 2026
a*d*c*i*n*n*m*n*a*h*a*t*c*r*.com F Sep 4, 2026
a*d*c*i*n*s*r*i*e*.com F Sep 4, 2026
a*d*c*i*n*e*a*n*s*v*l*e*n.com F Sep 4, 2026
s*a*t*o*a.com F Sep 4, 2026
a*e*a*s*s*o*i*.com F Sep 4, 2026
t*a*p*l*m*u*p*a*k.com D Sep 4, 2026
r*a*p*o*e*t*s*l*e*s.com (WP 7.1) F Sep 4, 2026
a*b*s*t*b*l*r.ru F Sep 4, 2026
s*u*d*g*t*l*s*.com D Sep 3, 2026
f*m*l*a*o*p*a*u*o.com D Sep 3, 2026