Security snapshot
Across 185 prevent-xss-vulnerability WordPress sites indexed by TLDWP, compared to the all-WordPress average.
What stands out
TLDWP currently associates 185 indexed WordPress sites with prevent-xss-vulnerability, equivalent to 0% of the current WordPress dataset.
The largest measured difference is header-grade F: 36.2% versus 82.5% overall (-46.3 percentage points).
Username enumeration is 9.7% vs 38.5% overall (-28.8 pp); HTTPS adoption is 98.4% vs 96.2% overall (+2.2 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).
These are observational associations among sites where TLDWP detected prevent-xss-vulnerability, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
Prevent XSS Vulnerability
This plugin helps safeguard your website against two common types of Cross-Site Scripting (XSS) vulnerabilities: Reflected XSS: This happens when harmful scripts are hidden in a website’s URL. If a user clicks a link with such a script, it can run in their browser, potentially stealing their data or taking control of their system. Self-XSS: This occurs when a user’s own input on your website is displayed back to them in an unsafe way, allowing malicious scripts to run in their browser. Thi…
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| g*d*l*a.o*g.il (WP 7.0.2) | F | Sep 9, 2026 | |
| m*p*m*l*p*l*k*.pl | A | Sep 9, 2026 | |
| c*s*d*m*e*a.pt (WP 7.1) | F | Sep 8, 2026 | |
| i*a*.c*.il | A | Sep 8, 2026 | |
| v*s*t*r*.c*.il | C | Sep 8, 2026 | |
| w*s*o*m*n*f*c*u*i*g.com | F | Sep 7, 2026 | |
| s*n*.my (WP 7.1) | F | Sep 7, 2026 | |
| v*a*d.com (WP 6.6) | D | Sep 6, 2026 | |
| b*s*h*s*s.com (WP 7.1) | A | Sep 6, 2026 | |
| a*d*o*d*i*e.com (WP 7.1) | F | Sep 6, 2026 | |
| o*m.com (WP 7.1) | F | Sep 6, 2026 | |
| k*l*p*r*a*k.com (WP 5.9.10) | C | Sep 6, 2026 | |
| 1*2*e*u*e.nl | B | Sep 6, 2026 | |
| e*e*t*m*b*.com | A | Sep 6, 2026 | |
| e*e*t*o*i.com | A | Sep 5, 2026 | |
| r*d*u*i*.com | A | Sep 5, 2026 | |
| d*i*y*o*e*f*u*c*.com | B | Sep 4, 2026 | |
| d*u*s*a*.com | D | Sep 4, 2026 | |
| d*g*g*m*n*s.com (WP 6.9.7) | F | Sep 3, 2026 | |
| a*a*i*g*v*n*a*p*.com | A | Sep 2, 2026 | |
| s*l*h*l*.a*.uk | B | Sep 2, 2026 | |
| s*a*e*o*t*n*.com | F | Sep 2, 2026 | |
| z*b*i*m.com | F | Sep 2, 2026 | |
| c*r*d*b*.com | F | Sep 2, 2026 | |
| a*e*t*n*e*s.com | A | Sep 1, 2026 | |
| x*-*7*c*p*a*6*z*u*1*e*h*h*e.com (WP 7.1) | F | Sep 1, 2026 | |
| e*m.c*m.mk (WP 7.1) | C | Sep 1, 2026 | |
| o*t*n*-*a*i*g.com | A | Sep 1, 2026 | |
| e*g*i*h*o*t*a*e*.ru (WP 7.1) | F | Sep 1, 2026 | |
| n*i*u*i.cn | D | Aug 30, 2026 | |
| a*t.o*g.il | F | Aug 30, 2026 | |
| t*o*z*e*i*g*o*p.com (WP 6.9.7) | F | Aug 30, 2026 | |
| t*o*z*n*i*.com (WP 6.9.7) | F | Aug 30, 2026 | |
| t*o*z*n*m*t*o*i*d*a.com (WP 6.9.7) | F | Aug 30, 2026 | |
| n*s*p*l*a*c*.com | F | Aug 30, 2026 | |
| t*n*h*m*t*s*i*r*e*.com | F | Aug 30, 2026 | |
| i*t*s*.pl | F | Aug 29, 2026 | |
| j*a*h*l*a*.com | C | Aug 28, 2026 | |
| a*c*.o*g.il | F | Aug 27, 2026 | |
| f*r*t*a*i*a*b*n*.c*.mw | A | Aug 27, 2026 | |
| l*n*-*o*.com | D | Aug 27, 2026 | |
| b*k*-*e*n*a*e*.de | F | Aug 26, 2026 | |
| e*7*o*t*a*e.com | F | Aug 26, 2026 | |
| b*s*n*t*o*k*o*i*o*.com | F | Aug 26, 2026 | |
| b*s*e*e*t*p*s.com | A | Aug 26, 2026 | |
| g*c*n*d*.ca | A | Aug 25, 2026 | |
| w*y*c*e*c*l*g*c.com | F | Aug 25, 2026 | |
| a*i*b*v*f*s.ru | B | Aug 25, 2026 | |
| t*-*e*i*n.com | F | Aug 25, 2026 | |
| p*b*i*s*e*d*o*u*.com | F | Aug 24, 2026 | |
| m*m*n*g*o*p.c*.il | F | Aug 23, 2026 | |
| c*l*b*r*t*o*m*p*e*.com | F | Aug 23, 2026 | |
| b*a*o*r*e*i*o*i*t.pl | C | Aug 23, 2026 | |
| b*l*h*l*s*l*j*w*l*y.com (WP 6.9.1) | F | Aug 23, 2026 | |
| g*o*p*o*t*n*.com | A | Aug 23, 2026 | |
| g*l*e*v*l*e*e*v*c*r*u*t.com | A | Aug 23, 2026 | |
| t*u*.c*.il | A | Aug 22, 2026 | |
| j*c*l*n*a*l*r.com | F | Aug 22, 2026 | |
| p*o*e*x*.com | A | Aug 22, 2026 | |
| a*o*s*a*u*c*l*u*a*o*.com | F | Aug 22, 2026 | |
| c*n*e*t*o*i.com | A | Aug 21, 2026 | |
| l*s*e*t*l*p*r*z*e*s.com (WP 7.1) | A | Aug 21, 2026 | |
| a*c*p*.org | A | Aug 21, 2026 | |
| s*i*n*e*o*i*f*d*r*l.com | F | Aug 21, 2026 | |
| s*i*n*e*o*i*e*7.com | F | Aug 21, 2026 | |
| s*i*n*e*o*i*.com | F | Aug 21, 2026 | |
| s*i*l*g*c.com | F | Aug 20, 2026 | |
| a*d*o*d*i*e.co (WP 7.1) | F | Aug 20, 2026 | |
| g*m*n*l*c*n*i*g.com | D | Aug 20, 2026 | |
| c*a*m*a*e*e*.com | A | Aug 20, 2026 | |
| g*m*f*a*p.com | A | Aug 20, 2026 | |
| c*r*i*i*d*t*a*s*a*i*n*o*f*c*.com | F | Aug 19, 2026 | |
| g*l*n*o*m*t*c*.com | D | Aug 19, 2026 | |
| d*n*m*c*p*l*c*t*o*.com | F | Aug 18, 2026 | |
| c*n*r*m*d*c*a*c.com | A | Aug 18, 2026 | |
| f*i.o*g.il | D | Aug 18, 2026 | |
| s*t*a*i*p*c*f*c.com (WP 6.9.7) | C | Aug 18, 2026 | |
| f*t*r*p*y.com | D | Aug 17, 2026 | |
| t*e*.e*u.hk (WP 7.0.4) | F | Aug 16, 2026 | |
| h*l*a*f*e*t.de | D | Aug 16, 2026 | |
| c*o*d*e*k.ai | B | Aug 15, 2026 | |
| e*e*s*o*t*a*l.c*.uk | A | Aug 14, 2026 | |
| c*m*e*c*a*d*b*c*u*s*l*n*.com | F | Aug 14, 2026 | |
| f*d*r*t*e.nl (WP 7.0.2) | F | Aug 10, 2026 | |
| r*v*s*a*e*t*a*.c*m.ar (WP 7.0.2) | F | Aug 7, 2026 | |
| s*h*-*e*t.c*.il | F | Aug 6, 2026 | |
| m*g*s*r.c*m.mx (WP 7.0.2) | F | Aug 6, 2026 | |
| s*a*t*o.c*.kr | C | Aug 6, 2026 | |
| l*n*d*.c*.il (WP 6.2.2) | C | Aug 6, 2026 | |
| h*t*l*o*a*a*e*s*l.mx | F | Aug 6, 2026 | |
| s*n*a*d*r*m*r*n*a.c*m.br | B | Aug 5, 2026 | |
| c*u*e*e*a*p*d*s*.c*m.br (WP 6.5.8) | F | Aug 5, 2026 | |
| a*i*-*i*.org (WP 6.4.2) | A | Aug 4, 2026 | |
| s*p*g*e*n.nl (WP 7.0.2) | D | Aug 4, 2026 | |
| c*r*u*t*i*l*s*i*l*n*u*e.ca | A | Aug 3, 2026 | |
| u*s*u*c*.c*m.sa | A | Aug 3, 2026 | |
| l*t.c*m.pl (WP 5.4.19) | F | Aug 3, 2026 | |
| m*t*e.o*g.au | F | Aug 1, 2026 | |
| s*r*t*o*d.a*.uk | B | Aug 1, 2026 | |
| t*e*e*d*n*t*t*t*.com (WP 6.8.2) | D | Aug 1, 2026 |