WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: matomo (Used by 2,353 domains)

Security snapshot

Across 2,353 matomo WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Security metrics currently cover 2,411 matching records in the cached metrics snapshot.

Grade A 6% Grade B 4% Grade C 5% Grade D 9% Grade F 75%
Fail the header check (F)75%vs 82.6% avg
Leak usernames33%vs 38.7% avg
Expose a sensitive file2%vs 1.8% avg
Use HTTPS96%vs 96.3% avg

What stands out

TLDWP currently associates 2,353 indexed WordPress sites with matomo, equivalent to 0% of the current WordPress dataset.

The largest measured difference is header-grade F: 75.3% versus 82.6% overall (-7.3 percentage points).

Username enumeration is 33.3% vs 38.7% overall (-5.4 pp); Sensitive-file exposure is 2% vs 1.8% overall (+0.2 pp); HTTPS adoption is 96.1% vs 96.3% overall (-0.2 pp).

These are observational associations among sites where TLDWP detected matomo, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Infrastructure patterns

Infrastructure detected alongside matomo. Percentages are within sites where that specific signal was detectable; the baseline compares the same signal across detected WordPress sites overall.

Co-occurrence describes technologies observed on the same sites. Detection coverage varies by signal, and an association does not imply that one technology caused or selected another.

Matomo Analytics

👤 matomoteam

Already a Matomo On-Premise or Matomo Cloud user? You need to use the Connect Matomo plugin instead of this plugin. For all you WordPress website owners wanting an easier way to get customer insights to grow your business, you can now get the solution the professionals use, for free! Matomo Analytics is the #1 used Google Analytics alternative that offers a powerful range of features, security and protects the privacy of your users.…

Domain Version Exposures Headers Last Checked
u*r*v*l*e*.com (WP 6.9.7) F Sep 12, 2026
c*a*a*e*.com (WP 7.1) F Sep 12, 2026
m*s*e*f*i*n*e.fr F Sep 12, 2026
m*f*e*c*r*o*s.com (WP 7.1) D Sep 12, 2026
m*m*r.lu F Sep 12, 2026
f*-*r*c*e*f*l*e*.com (WP 7.1) F Sep 12, 2026
g*t*c*n*t.de A Sep 12, 2026
m*g*e*h*p.nl (WP 7.1) B Sep 12, 2026
n*t*f*t*.de F Sep 12, 2026
a*t*a*i*g.ch (WP 6.9.7) 5.8.2· 60% conf. F Sep 12, 2026
f*f*.org 5.8.1· 60% conf. F Sep 12, 2026
s*r*r*s.it F Sep 12, 2026
s*u*l*i.ch (WP 6.8.8) F Sep 12, 2026
b*e*v*g*s*e*d*u*d*s.fr (WP 7.1) F Sep 12, 2026
a*i*a*-*o*r*a*.eu (WP 7.1) F Sep 12, 2026
l*b*a*o*.org B Sep 12, 2026
a*e*-*o*s*r*a*o*r*-*a*s*i*l*.fr F Sep 12, 2026
e*s*t*o*s.tv (WP 6.9.7) 5.13.0· 60% conf. F Sep 12, 2026
e*i*c*n*e*l*.com (WP 7.1) D Sep 12, 2026
c*a*a*o*.fr F Sep 12, 2026
o*g*n*c*a*m*n*g*t*w*y*.com (WP 7.1) F Sep 12, 2026
c*a*e*u*e*o*c*.com F Sep 12, 2026
p*w*r*t*d*e.com (WP 7.1) F Sep 12, 2026
c*a*e*u*e*a*z*y.com (WP 7.1) F Sep 12, 2026
r*m*l*n*e.lu F Sep 12, 2026
f*e*e*n.de B Sep 12, 2026
i*h*.org (WP 6.9.7) B Sep 11, 2026
p*m*l*-*r*e*.at (WP 7.1) F Sep 11, 2026
r*g*t*o*e*r*.ca (WP 7.1) B Sep 11, 2026
u*i*e*s*u*b*c*n*o*a*s*.com D Sep 11, 2026
c*a*r*e*-*u*d*o*.com C Sep 11, 2026
c*a*r*e*-*e*r*.com C Sep 11, 2026
a*t*s*e*b*l*i*u*.be F Sep 11, 2026
t*x*g*e*t*e*e*.de (WP 6.8.2) F Sep 11, 2026
d*r*i*e*n*s*h*e*n*r.de F Sep 11, 2026
s*k*k*e*.de F Sep 11, 2026
e*s*m*l*-*g*s*o*s.fr (WP 7.1) F Sep 11, 2026
s*m*t*c*m*t*o*o*i*.com (WP 7.1) F Sep 11, 2026
a*a*h*8.org (WP 7.1) F Sep 11, 2026
d*r*i*r*-*e*o*r*.fr F Sep 11, 2026
m*t*o*l*b.cologne (WP 7.1) F Sep 11, 2026
i*e*.fr (WP 7.1) F Sep 11, 2026
v*i*.org B Sep 11, 2026
z*m*i*s*h.saarland (WP 6.6.7) F Sep 11, 2026
i*p*o*s*l*i*g.de F Sep 11, 2026
h*n*a*b.de (WP 7.1) F Sep 11, 2026
m*u*e*s*-*a*s*f*l.fr (WP 7.1) F Sep 11, 2026
o*b*t*k.com (WP 6.6.7) F Sep 11, 2026
e*f*l*t*y*.com (WP 7.1) F Sep 11, 2026
k*a*m*r*a*.com A Sep 11, 2026
p*t*s*m*r*l*o.com (WP 7.1) A Sep 11, 2026
u*i*e*s*c*m*r*-*h*s*e.com (WP 7.1) F Sep 11, 2026
u*i*e*s*j*u*-*c.com (WP 7.1) F Sep 11, 2026
r*e*f*a*c*.fr F Sep 11, 2026
s*i*g*l*.de F Sep 11, 2026
n*v*.de (WP 7.1) F Sep 11, 2026
k*e*t*i*h.de (WP 7.0.4) F Sep 11, 2026
h*l*u*-*a*z.de (WP 7.1) F Sep 11, 2026
h*l*h*m*n*a*t*a.com (WP 7.1) F Sep 11, 2026
h*m*d.de F Sep 11, 2026
g*t*a*a*e*t*o*r*e*.com (WP 6.9.4) F Sep 11, 2026
b*t*e*l*n*e*.de (WP 7.1) F Sep 11, 2026
s*i*o*g*t*a*-*m*i*s.de (WP 7.1) F Sep 11, 2026
t*a*s*e*a*u*g*n*r*.de (WP 7.1) C Sep 11, 2026
l*s*e*r*c*e*e*x.net (WP 7.1) F Sep 11, 2026
a*p*e*s.de (WP 7.1) F Sep 11, 2026
h*n*w*r*s*o*m.de (WP 7.1) F Sep 11, 2026
b*o*o*r*e*-*e.org A Sep 11, 2026
g*r*i*g*b.de F Sep 11, 2026
i*a*s.no (WP 7.1) F Sep 11, 2026
a*a*e.org D Sep 11, 2026
b*s*s*o*.de (WP 7.0.4) A Sep 11, 2026
d*b*e*s*f*.nl (WP 7.1) F Sep 11, 2026
q*e*t*o*b*o*c*n*m*.eu C Sep 11, 2026
g*e*l*f*.fr (WP 7.1) C Sep 11, 2026
d*l*i*o*a.com A Sep 11, 2026
f*s*i*e*m*u*e*e*t.com F Sep 11, 2026
b*t*k*-*o*s*l*i*g.de (WP 7.1) F Sep 11, 2026
e*f*n*g*.com (WP 7.1) F Sep 11, 2026
c*2*.eu (WP 7.1) F Sep 11, 2026
n*u*o*.fi (WP 7.1) F Sep 11, 2026
f*p*-*d*.fr F Sep 11, 2026
k*-*a*h*i*h*e*.com F Sep 11, 2026
w*-*e*w*r*.org (WP 7.1) F Sep 11, 2026
b*e*t*a*e*.de (WP 6.9.7) F Sep 11, 2026
f*c*o*i*g*s*a*t.jp D Sep 11, 2026
p*a*-*c*i*n*-*h*r*p*e*e*.fr A Sep 11, 2026
s*o*t*e*.com F Sep 11, 2026
r*a*i*g*a*b*e*s.com (WP 7.1) F Sep 11, 2026
a*e*y*8*.org (WP 6.9.7) F Sep 11, 2026
b*u*n*r*h*.com B Sep 11, 2026
o*h*l*a*-*r.com F Sep 10, 2026
c*r*l*c*a*l*s*i*e.org F Sep 10, 2026
m*m*c*a*c*n*a*e*s*h*f*e*.de (WP 7.0.4) F Sep 10, 2026
i*m*c*i*k*4.de (WP 6.1.12) F Sep 10, 2026
c*r*e*-*a*i*.org (WP 7.0.4) F Sep 10, 2026
w*e*t*n*a*a*.de (WP 7.1) F Sep 10, 2026
v*o*k*.fi (WP 6.1.1) F Sep 10, 2026
a*p*r*i*s*m*s*a*e.com (WP 7.1) F Sep 10, 2026
c*p*y*.fr F Sep 10, 2026