WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: purefit-core (Used by 9 domains)

Security snapshot

Across 9 purefit-core WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 0% Grade C 0% Grade D 11% Grade F 89%
Fail the header check (F)89%vs 82.5% avg
Leak usernames56%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS100%vs 96.2% avg

What stands out

TLDWP currently associates 9 indexed WordPress sites with purefit-core, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 55.6% versus 38.5% overall (+17.1 percentage points).

Header-grade F is 88.9% vs 82.5% overall (+6.4 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).

These are observational associations among sites where TLDWP detected purefit-core, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

purefit-core Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
m*c*a*i*a*a*d*e*d*n*.com (WP 7.1) F Sep 8, 2026
s*u*s*o*s*.com (WP 7.1) F Sep 5, 2026
m*s*i*e*o*k*u*.com (WP 7.1) F Sep 4, 2026
s*e*p*b*e*.com (WP 7.1) F Sep 2, 2026
5*a.es (WP 7.1) F Sep 1, 2026
s*p*e*e*e*l*h*u*p*.com (WP 7.0.4) D Aug 19, 2026
5*a*a*g*d*s.com (WP 7.0.4) F Aug 16, 2026
p*y*i*u*-*u*r*t*o*.com (WP 7.0.2) F Jul 25, 2026
u*i*r*n*t*i*i*n.com (WP 7.0.2) F Jul 20, 2026