Security snapshot
Across 10 promotion-plus WordPress sites indexed by TLDWP, compared to the all-WordPress average.
What stands out
TLDWP currently associates 10 indexed WordPress sites with promotion-plus, equivalent to 0% of the current WordPress dataset.
The largest measured difference is username enumeration: 10% versus 38.5% overall (-28.5 percentage points).
Sensitive-file exposure is 20% vs 1.8% overall (+18.2 pp); Header-grade F is 100% vs 82.5% overall (+17.5 pp); HTTPS adoption is 80% vs 96.2% overall (-16.2 pp).
These are observational associations among sites where TLDWP detected promotion-plus, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
promotion-plus Premium / Custom
This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| e*i*n*l*s*.com | F | Aug 24, 2026 | |
| b*l*l*n*.com (WP 7.0.4) | F | Aug 23, 2026 | |
| s*e*d*o*l*w*r.com (WP 7.0.4) | F | Aug 17, 2026 | |
| s*u*c*b*r*n.com | F | Aug 17, 2026 | |
| p*l*k*t*h*a*.ir | F | Aug 17, 2026 | |
| l*c*a.ir | F | Aug 17, 2026 | |
| a*a*i*y*t.ir | F | Aug 8, 2026 | |
| p*u*j*f*r.com | F | Jul 25, 2026 | |
| c*i*a*s*o*.com | F | Jul 23, 2026 | |
| f*o*b*l*s*a*.com (WP 7.0.2) | F | Jul 18, 2026 |