Security snapshot
Across 180 out-of-the-box WordPress sites indexed by TLDWP, compared to the all-WordPress average.
Grade A 2%
Grade B 3%
Grade C 2%
Grade D 8%
Grade F 84%
Fail the header check (F)84%vs 82.5% avg
Leak usernames29%vs 38.5% avg
Expose a sensitive file2.2%vs 1.8% avg
Use HTTPS97%vs 96.2% avg
What stands out
TLDWP currently associates 180 indexed WordPress sites with out-of-the-box, equivalent to 0% of the current WordPress dataset.
The largest measured difference is username enumeration: 29.4% versus 38.5% overall (-9.1 percentage points).
Header-grade F is 84.4% vs 82.5% overall (+1.9 pp); HTTPS adoption is 97.2% vs 96.2% overall (+1 pp); Sensitive-file exposure is 2.2% vs 1.8% overall (+0.4 pp).
These are observational associations among sites where TLDWP detected out-of-the-box, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
out-of-the-box Premium / Custom
This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| t*u*t*n*g*o*p.com (WP 7.0.4) | F | Sep 8, 2026 | |
| m*a*o*v*e*g*z*b*s.com (WP 7.0.4) | F | Sep 7, 2026 | |
| m*a*o*v*e*w*o*w*r*.com (WP 7.0.4) | F | Sep 7, 2026 | |
| k*n*s*i*w*o*n*p*o*e*t*.com (WP 6.2.11) | F | Sep 7, 2026 | |
| s*p*a*e*d.org (WP 7.1) | D | Sep 6, 2026 | |
| y*n*-*a*c*.com | F | Sep 6, 2026 | |
| y*s*r*m*.com | F | Sep 6, 2026 | |
| h*r*i*.swiss (WP 6.6.7) | F | Sep 5, 2026 | |
| m*t*h*w*e*r*r*.com (WP 5.5.1) | F | Sep 5, 2026 | |
| r*m*x*r*v*.com (WP 7.1) | F | Sep 5, 2026 | |
| l*m*h*u*e*i*h*i*g.c*.uk (WP 7.1) | C | Sep 4, 2026 | |
| e*o*l*s*o*i*n.com | F | Sep 4, 2026 | |
| n*d*v*n*o*v*r.com | F | Sep 4, 2026 | |
| x*s*l*.com | F | Sep 3, 2026 | |
| x*s*l*s.com | F | Sep 3, 2026 | |
| x*s*l*a*i*n*l*e*u*i*y.com | F | Sep 3, 2026 | |
| x*s*l.com | F | Sep 3, 2026 | |
| x*s*l*n*.com | F | Sep 3, 2026 | |
| x*-*s.com | F | Sep 3, 2026 | |
| b*u*w*t*r*e*a*i*a*i*n.com | B | Sep 3, 2026 | |
| b*u*s*y*p*u*.com | F | Sep 3, 2026 | |
| o*l*2*.com | F | Sep 3, 2026 | |
| o*l*i*l*w*t*r*e*k*y.com | F | Sep 3, 2026 | |
| o*l*i*l*w*t*r*i*s*r*a*.com | F | Sep 3, 2026 | |
| o*l*i*l*w*t*r*a*a*e*e*t.com | F | Sep 3, 2026 | |
| o*l*i*l*w*t*r*i*e*t.com | F | Sep 3, 2026 | |
| o*l*i*l*w*t*r.com | F | Sep 3, 2026 | |
| o*l*i*l*p*.com | F | Sep 3, 2026 | |
| w*b*a*k*t*n*.coach | F | Sep 3, 2026 | |
| n*s*o*o*.com | F | Sep 2, 2026 | |
| r*u*u*l*a*.com (WP 6.7.7) | D | Sep 2, 2026 | |
| c*t*s*e*i*.com | F | Sep 1, 2026 | |
| s*y*v*e.com | F | Sep 1, 2026 | |
| t*n*r*y.com | D | Sep 1, 2026 | |
| c*s*g*n*.com | F | Sep 1, 2026 | |
| l*n*h*u*t*u*k*n*.com | F | Aug 31, 2026 | |
| l*n*h*u*s*i*g*f*h*r*a*.com | F | Aug 31, 2026 | |
| s*a*g*f*m*l*r*c*r*s.com | F | Aug 31, 2026 | |
| a*o*g*i*e*i*i*t*y*i*e*.com | D | Aug 31, 2026 | |
| m*r*u*d*i*l*e*m.com | F | Aug 30, 2026 | |
| c*o*s*v*r*o*u*i*n*n*.com | F | Aug 30, 2026 | |
| c*o*s*v*r*o*u*i*n*-*s.com | F | Aug 30, 2026 | |
| n*s*i*h*i*g.com | F | Aug 30, 2026 | |
| g*o*f*i*a*a*x.com | D | Aug 30, 2026 | |
| t*n*i*4*a*c*r.org | F | Aug 29, 2026 | |
| c*e*t*v*t*s*f*.com | F | Aug 29, 2026 | |
| m*n*o.com | F | Aug 28, 2026 | |
| m*n*o*o*t*c*e*s.com | F | Aug 28, 2026 | |
| w*i*t*g*a*o*s.com | F | Aug 28, 2026 | |
| w*i*s*a*l*r*.com | F | Aug 28, 2026 | |
| w*i*s*a*l*r.com | F | Aug 28, 2026 | |
| w*e*t*r*r*s*s*n*.com | F | Aug 28, 2026 | |
| w*e*e*g*s*s*e*s.com | F | Aug 28, 2026 | |
| w*c*n*r*c*i*g*e*v*c*s.com | F | Aug 28, 2026 | |
| o*d*k*o*s*z*k*.info (WP 7.0.4) | F | Aug 28, 2026 | |
| h*o*c*n*e*t*o*s.com | F | Aug 28, 2026 | |
| g*o*i*b*.com | F | Aug 27, 2026 | |
| g*u*e*o*.nl | F | Aug 26, 2026 | |
| c*u*t*y*i*i*o*d*e*a*m*.com | F | Aug 26, 2026 | |
| l*m*h*u*e*i*h*i*g.com (WP 7.1) | C | Aug 25, 2026 | |
| l*m*h*u*e*9*0.com (WP 7.0.1) | C | Aug 25, 2026 | |
| m*i*b*x*f*o*a*e.com (WP 7.1) | F | Aug 25, 2026 | |
| m*o*e*a*e*.org | F | Aug 25, 2026 | |
| s*a*e*w.com | F | Aug 25, 2026 | |
| s*a*e*2*.com | F | Aug 25, 2026 | |
| a*c*n*i*n*r*s*.o*g.uk | F | Aug 24, 2026 | |
| v*b*o*i*t*.org (WP 7.1) | F | Aug 24, 2026 | |
| m*l*v*l*e*.fr | F | Aug 23, 2026 | |
| s*e*y*u*l*.com | F | Aug 23, 2026 | |
| p*s*n*r*c*i*e.com | B | Aug 22, 2026 | |
| p*o*w*m*o*k*u*s.com | F | Aug 22, 2026 | |
| l*s*d*a*a*t*.com (WP 5.5.20) | F | Aug 21, 2026 | |
| g*y*o*.com | F | Aug 21, 2026 | |
| m*a*c*e*o*r*e*.com (WP 7.1) | C | Aug 20, 2026 | |
| c*a*e*c*c*a*b*r.com | D | Aug 20, 2026 | |
| k*a*i.photography (WP 6.8.3) | F | Aug 19, 2026 | |
| c*r*i*i*d*a*r*p*r*s.com (WP 7.0.4) | F | Aug 19, 2026 | |
| a*c*p.org | F | Aug 18, 2026 | |
| s*m*e*f*e*d*i*i*e*n*d*o*l*s.com | F | Aug 18, 2026 | |
| m*l*t*a*e*o*i*l.com | F | Aug 18, 2026 | |
| d*r*m*x*n*.com | F | Aug 18, 2026 | |
| f*m*r*h.com (WP 7.0.4) | F | Aug 17, 2026 | |
| w*t*r*o*n*c*i*n*v*n*s.com | F | Aug 17, 2026 | |
| z*u*.si | F | Aug 17, 2026 | |
| m*b*x*m*.com (WP 6.8.8) | F | Aug 17, 2026 | |
| a*c*j.com | F | Aug 17, 2026 | |
| s*r*e*u*c*t*.com | D | Aug 16, 2026 | |
| c*e*n*r*n*.com | F | Aug 16, 2026 | |
| o*c*i*m*.org (WP 7.0.4) | A | Aug 16, 2026 | |
| s*t*t*o*e*.fr (WP 4.9.28) | F | Aug 16, 2026 | |
| q*a*i*e*.c*.uk | F | Aug 16, 2026 | |
| i*s*l*n*n*u*i*o.com (WP 7.0) | D | Aug 16, 2026 | |
| c*l*i.com | B | Aug 16, 2026 | |
| s*n*r*t*r*.com | F | Aug 15, 2026 | |
| t*u*t*p*.eu | F | Aug 15, 2026 | |
| p*e*o*n*i*.org | F | Aug 15, 2026 | |
| c*t*l*s*g*o*p*d*i*o*s.com | F | Aug 15, 2026 | |
| s*e*b*b*b*o*k*i*c*i*g.com (WP 7.0.4) | F | Aug 15, 2026 | |
| g*m*l*g*l.com | F | Aug 14, 2026 | |
| s*a*s*e*s*e*d*n*a*g.nl (WP 7.0) | D | Aug 9, 2026 |
Page 1 of 2
Next »