Security snapshot
Across 7 random-post-box WordPress sites indexed by TLDWP, compared to the all-WordPress average.
What stands out
TLDWP currently associates 7 indexed WordPress sites with random-post-box, equivalent to 0% of the current WordPress dataset.
The largest measured difference is header-grade F: 100% versus 82.5% overall (+17.5 percentage points).
Username enumeration is 42.9% vs 38.5% overall (+4.4 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).
These are observational associations among sites where TLDWP detected random-post-box, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
Random Post Box
Random Post Box is a plugin that lets you place a box anywhere on your blog, with template tag or shortcode, and load random posts with an interval and fade effect. It uses jQuery (Ajax) which means that the content is loaded without loading the rest of the page. The timings can be set in the admin options-panel. The template tag is . You can also use the shortcode [random-post-box] in a page or post.…
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| t*o*o*l.com (WP 3.1.2) | F | Sep 7, 2026 | |
| g*o*t*u*t*r*p*r*y*e*t*l.com (WP 7.1) | F | Aug 22, 2026 | |
| t*e*o*i*g*y*.net (WP 7.0.4) | F | Aug 17, 2026 | |
| p*i*e*o.gr (WP 4.4.34) | F | Aug 6, 2026 | |
| d*c*m*v.nl | F | Jul 28, 2026 | |
| i*t*g*i*y*t*.com (WP 5.3.21) | F | Jul 26, 2026 | |
| d*c*m*v.com | F | Jul 18, 2026 |