WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: payhere-payment-gateway (Used by 160 domains)

Security snapshot

Across 160 payhere-payment-gateway WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Security metrics currently cover 158 matching records in the cached metrics snapshot.

Grade A 1% Grade B 2% Grade C 7% Grade D 6% Grade F 84%
Fail the header check (F)84%vs 82.5% avg
Leak usernames30%vs 38.5% avg
Expose a sensitive file1.3%vs 1.8% avg
Use HTTPS96%vs 96.2% avg

What stands out

TLDWP currently associates 160 indexed WordPress sites with payhere-payment-gateway, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 29.7% versus 38.5% overall (-8.8 percentage points).

Header-grade F is 84.2% vs 82.5% overall (+1.7 pp); HTTPS adoption is 95.6% vs 96.2% overall (-0.6 pp); Sensitive-file exposure is 1.3% vs 1.8% overall (-0.5 pp).

These are observational associations among sites where TLDWP detected payhere-payment-gateway, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

PayHere Payment Gateway

πŸ‘€ PayHere πŸ”— Plugin Homepage

PayHere is a Sri Lankan Payment Gateway Service that enables you to accept payments online from your customers via Visa, MasterCard, Amex, eZcash, mCash & Internet Banking services. You can install this plugin to list PayHere as a payment method in your WooCommerce store.

Domain Exposures Headers Last Checked
d*a*m*s*r*s*a*e*.com (WP 7.1) F Sep 8, 2026
m*h*r*a*s.lk (WP 7.1) F Sep 8, 2026
m*d*r*.lk (WP 7.1) F Sep 7, 2026
k*d*b*u*i*u*c*.com (WP 7.1) D Sep 6, 2026
k*m*s*i*a*k*.com (WP 6.9) F Sep 6, 2026
e*e*l*s*i*g*a*k*.com (WP 7.1) F Sep 6, 2026
t*a*s*s*a.lk F Sep 5, 2026
e*c*t*d*c*n*e*.com (WP 7.1) F Sep 5, 2026
e*c*t*d*a*r*a*.com (WP 7.1) F Sep 5, 2026
h*l*e*s*e*.com F Sep 5, 2026
t*r*o*n*r*y.lk (WP 7.1) F Sep 5, 2026
y*r*d*e*m*n.com (WP 6.8.8) F Sep 5, 2026
e*g*k*r*i*g.com (WP 7.0.4) F Sep 5, 2026
k*d*p*l*.com (WP 7.1) F Sep 5, 2026
d*e*m*b*d*i*g.com (WP 7.1) D Sep 4, 2026
k*e*t*i*h*r*a*i*i.com (WP 7.1) F Sep 4, 2026
z*f*r*l*.com (WP 7.1) F Sep 4, 2026
k*c*o*.com F Sep 3, 2026
t*o*f*a*e.com (WP 7.1) F Sep 3, 2026
e*h*n*l*o*s.com (WP 7.0.4) F Sep 3, 2026
a*r*l*e*.com (WP 7.0.4) C Sep 2, 2026
k*u*u*l*s*f*r*.com (WP 7.0.4) F Sep 2, 2026
s*g*i*a*s*o*.com (WP 6.7.7) F Sep 2, 2026
s*y*a*i*n*w*.com (WP 7.1) F Sep 1, 2026
s*y*i*e*r*l*n*a.com (WP 7.1) F Sep 1, 2026
e*g*n*m*c*b*j*t.com (WP 7.1) B Sep 1, 2026
c*a*r*l*.com (WP 7.1) F Sep 1, 2026
o*e*n*h*o*y*l.com (WP 7.1) D Aug 31, 2026
r*k*s*.com (WP 6.9.4) F Aug 31, 2026
r*j*r*g*a*c*s.com (WP 7.1) F Aug 31, 2026
t*e*a*a*e.lk (WP 7.1) F Aug 31, 2026
s*t*u*i*a*e*l*h.com (WP 6.7.2) F Aug 31, 2026
b*x*e*l*n*e.com (WP 7.1) F Aug 30, 2026
w*w*e*i*p*o*u*t*o*s.com F Aug 30, 2026
a*n*l*m.lk (WP 7.1) F Aug 29, 2026
l*s*o*p*r.com (WP 7.1) F Aug 29, 2026
p*b.lk (WP 7.1) F Aug 29, 2026
s*o*p*p*c*.com (WP 7.1) F Aug 29, 2026
j*d*s*g*s.lk (WP 6.8.8) F Aug 28, 2026
w*s*l*k*g*d.com (WP 7.1) F Aug 28, 2026
m*l*o*a*a*d*.com (WP 7.1) F Aug 27, 2026
r*f*e*h*i*s*e*r.com (WP 7.1) F Aug 27, 2026
w*n*h*s*e*g*o*a*.com (WP 7.1) C Aug 27, 2026
g*o*b*b.com (WP 7.1) C Aug 26, 2026
4*h*n*l*o*.com (WP 6.7.7) F Aug 25, 2026
c*y*u*i*.com (WP 7.0.4) F Aug 25, 2026
3*l*.com (WP 6.9.4) F Aug 25, 2026
p*l*a*t*.com F Aug 24, 2026
s*e*c*a*d*e*r*n*.lk (WP 7.0.2) C Aug 24, 2026
p*k*6*.com (WP 6.9.7) F Aug 24, 2026
p*i*t*i*.com (WP 7.1) F Aug 24, 2026
t*e*a*f*m*r*e.lk A Aug 23, 2026
c*y*o*a*r*.lk (WP 6.9.7) F Aug 23, 2026
a*y*a*m.com (WP 7.1) F Aug 23, 2026
g*l*e*i*y*n*i*e.lk (WP 7.1) F Aug 23, 2026
g*h*n*o*k*h*p.com (WP 7.1) F Aug 23, 2026
s*a*h*n*b*a*h.com (WP 6.8.8) F Aug 22, 2026
a*i*p*n*i*.com (WP 7.1) F Aug 22, 2026
l*t*s*l*o*.com (WP 7.0) F Aug 22, 2026
b*o*r*c*.lk (WP 7.1) F Aug 22, 2026
s*-*e*v*c*s*o*t*.com (WP 7.1) D Aug 21, 2026
b*a*a*p*a*.lk (WP 7.0.4) D Aug 21, 2026
b*a*a*p*a*.com (WP 7.0.4) D Aug 21, 2026
v*n*y*t*c*l*.com (WP 7.1) C Aug 20, 2026
i*f*v*p*i*t.com (WP 6.9.1) F Aug 20, 2026
g*m*d*c*t*d*l*e*o*t.com (WP 7.1) F Aug 20, 2026
z*p*e*i*.lk (WP 7.1) F Aug 20, 2026
v*g*n*n*v*r*a*.com (WP 6.6.2) F Aug 20, 2026
c*y*o*h*m*e*s.com (WP 7.0.4) F Aug 19, 2026
c*y*o*g*e*n*a*k*t.com (WP 7.0.4) F Aug 19, 2026
k*m*p*x.com (WP 7.0.4) F Aug 19, 2026
o*f*c*s*a*i*n*r*.lk (WP 7.0.4) F Aug 19, 2026
i*t*r*e*i*w*b.lk (WP 7.0.4) F Aug 18, 2026
s*y*c*l*r.com (WP 7.0.4) B Aug 18, 2026
a*i*i*n*i*i*y.com (WP 7.0.4) F Aug 18, 2026
s*i*e*o*g*n*x.com (WP 7.0.4) F Aug 18, 2026
w*s*h*a*l*t*i*g.com (WP 7.0.4) F Aug 17, 2026
t*e*h*c*l*t*q*e*n.lk (WP 7.0.4) F Aug 17, 2026
d*n*o*c*.lk (WP 7.0.4) F Aug 16, 2026
a*v*n*e*n*i*e*l*s*.com (WP 7.0.4) F Aug 16, 2026
d*y*m*l.com (WP 7.0.4) F Aug 16, 2026
j*d*c*o*l.com (WP 7.0.4) F Aug 16, 2026
w*l*w*t*s*i*a*k*n.com F Aug 16, 2026
s*n*a*y*r.com (WP 7.0.4) F Aug 15, 2026
s*n*l*-*t*r*u*.com (WP 6.7.2) F Aug 15, 2026
m*o*e*s*o*e*.com (WP 7.0.4) F Aug 15, 2026
w*i*i*e*r*p*.com (WP 7.0.2) F Aug 15, 2026
a*o*i*a*d*e*u*.com (WP 7.0.4) F Aug 15, 2026
s*o*e*x*u*s*o*s*o*o*b*.com (WP 6.9.3) F Aug 15, 2026
a*i*h*o*k*.com (WP 7.0.4) C Aug 15, 2026
s*n*n*g*n*r*t*n*.com (WP 7.0.4) F Aug 15, 2026
g*e*d*i*.com (WP 6.9.7) A Aug 15, 2026
a*a*k*f*o*a.lk (WP 6.9.7) F Aug 15, 2026
l*n*a*a*k*t.lk (WP 6.9.7) F Aug 14, 2026
v*c*o*i*s.lk (WP 6.9.4) F Aug 7, 2026
p*r*u*a.lk F Aug 7, 2026
t*e*i*o*r*.com (WP 7.0.2) F Aug 4, 2026
s*l*y*w*m*s.com (WP 6.8.6) F Aug 3, 2026
n*i*e*l.com (WP 6.9.5) F Aug 2, 2026
p*t*o*m*.lk (WP 7.0.2) F Aug 2, 2026