WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: mycred-buddyboss (Used by 5 domains)

Security snapshot

Across 5 mycred-buddyboss WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 40% Grade B 0% Grade C 0% Grade D 0% Grade F 60%
Fail the header check (F)60%vs 82.5% avg
Leak usernames20%vs 38.5% avg
Expose a sensitive file20%vs 1.8% avg
Use HTTPS100%vs 96.2% avg

What stands out

TLDWP currently associates 5 indexed WordPress sites with mycred-buddyboss, equivalent to 0% of the current WordPress dataset.

The largest measured difference is header-grade F: 60% versus 82.5% overall (-22.5 percentage points).

Username enumeration is 20% vs 38.5% overall (-18.5 pp); Sensitive-file exposure is 20% vs 1.8% overall (+18.2 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp).

These are observational associations among sites where TLDWP detected mycred-buddyboss, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

myCred

👤 Saad Iqbal 🔗 Plugin Homepage

📢 🚨 Important Notice: myCred BuddyBoss is now part of the myCred Toolkit and will no longer receive updates here. Only security fixes will be provided. myCred BuddyBoss is a myCred integrated add-on that allows you to reward myCred points based on BuddyBoss events. Why use myCred BuddyBoss? myCred BuddyBoss add-on focuses on rewarding points based on triggered hooks associated with BuddyBoss events. The h…

Domain Version Exposures Headers Last Checked
o*s*r*t*r.com (WP 7.1) F Sep 7, 2026
w*r*d*l*r*e*t*a*n*t*o*k.com (WP 7.1) F Aug 30, 2026
m*s*u*d*r*c*r*i*g.com (WP 7.0.4) F Aug 16, 2026
t*e*o*r*e*i*w*r*.com A Jul 30, 2026
o*p*t*p*a*f*r*.com A Jul 19, 2026