WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: picturefillwp (Used by 2 domains)

Security snapshot

Across 2 picturefillwp WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 0% Grade C 0% Grade D 0% Grade F 100%
Fail the header check (F)100%vs 82.5% avg
Leak usernames0%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS100%vs 96.2% avg

What stands out

TLDWP currently associates 2 indexed WordPress sites with picturefillwp, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 0% versus 38.5% overall (-38.5 percentage points).

Header-grade F is 100% vs 82.5% overall (+17.5 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).

These are observational associations among sites where TLDWP detected picturefillwp, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Picturefill.WP

Note: This is an implementation of Picturefill.js version 1.2.x. For an implementation of Picturefill.js 2.x, see the master branch of the GitHub repository. Picturefill.WP is a simple and option-less plugin to serve HDPI and responsive images on a WordPress website. This plugin parses post and page content replacing images with a special syntax similar to the proposed syntax for the HTML5 picture element, then uses an adapted version of picturefill.js to load the appropriate image to the browser.…

Domain Exposures Headers Last Checked
l*r*e*r*e*h.com F Aug 29, 2026
t*n*j*a*o*i*s*i*u*e.edu F Aug 29, 2026