Security snapshot
Across 8 postal-address-autocomplete WordPress sites indexed by TLDWP, compared to the all-WordPress average.
Grade A 0%
Grade B 13%
Grade C 0%
Grade D 25%
Grade F 63%
Fail the header check (F)63%vs 82.5% avg
Leak usernames13%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS88%vs 96.2% avg
What stands out
TLDWP currently associates 8 indexed WordPress sites with postal-address-autocomplete, equivalent to 0% of the current WordPress dataset.
The largest measured difference is username enumeration: 12.5% versus 38.5% overall (-26 percentage points).
Header-grade F is 62.5% vs 82.5% overall (-20 pp); HTTPS adoption is 87.5% vs 96.2% overall (-8.7 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).
These are observational associations among sites where TLDWP detected postal-address-autocomplete, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
| Domain | Version | Exposures | Headers | Last Checked |
|---|---|---|---|---|
| m*x*k*t*.com (WP 7.1) | — | B | Sep 6, 2026 | |
| a*i*e*i*h*l*a*.com | — | D | Aug 28, 2026 | |
| w*a*i*g*a*n.c*.uk | — | F | Aug 24, 2026 | |
| l*f*w*t*a*l*h.com | — | D | Aug 24, 2026 | |
| t*i*a*o*m*t*d*o.c*.uk | — | F | Aug 6, 2026 | |
| m*f*n*w*a*i*g*a*n.c*.uk | — | F | Aug 2, 2026 | |
| w*a*i*g*o*m*.c*.uk | — | F | Aug 2, 2026 | |
| t*e*a*f*l.com (WP 7.0.2) | — | F | Jul 26, 2026 |
Page 1 of 1