Security snapshot
Across 9 private-media WordPress sites indexed by TLDWP, compared to the all-WordPress average.
What stands out
TLDWP currently associates 9 indexed WordPress sites with private-media, equivalent to 0% of the current WordPress dataset.
The largest measured difference is header-grade F: 66.7% versus 82.6% overall (-15.9 percentage points).
Username enumeration is 44.4% vs 38.6% overall (+5.8 pp); HTTPS adoption is 100% vs 96.3% overall (+3.7 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).
These are observational associations among sites where TLDWP detected private-media, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
Private Media
Ever wanted to make your media truely private? Make sure images, videos and other files are only accessible to chosen roles, or cannot be hotlinked, with permissions specifically set per item. This plugin adds the following major features to WordPress: Media Privacy: Lock access to items in the Media Library by preventing hotlinks only or by limiting access to files to selected user roles. User-friendly forbidden handler: Images set to private do not break on the frontend.…
| Domain | Version | Exposures | Headers | Last Checked |
|---|---|---|---|---|
| f*c*m.fr (WP 6.9.7) | — | F | Sep 4, 2026 | |
| c*l*e*e*n*v*r*i*y*a*l*w.com (WP 6.9.7) | — | F | Aug 24, 2026 | |
| b*r*e*u*3.fr (WP 7.0.4) | — | C | Aug 21, 2026 | |
| b*r*e*u*3.com (WP 7.0.4) | — | C | Aug 18, 2026 | |
| p*e*r*w*l*s.c*.uk (WP 7.0.4) | — | D | Aug 15, 2026 | |
| b*b*l*o*u*.no (WP 6.0.14) | — | F | Aug 13, 2026 | |
| h*c*d*u*k*i*a.at | — | F | Jul 21, 2026 | |
| a*p*r*e.fr (WP 7.0.2) | — | F | Jul 20, 2026 | |
| v*k*-*u*n*h*n.de (WP 7.0.2) | — | F | Jul 20, 2026 |