WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: stm-megamenu (Used by 435 domains)

Security snapshot

Across 435 stm-megamenu WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Security metrics currently cover 439 matching records in the cached metrics snapshot.

Grade A 1% Grade B 1% Grade C 3% Grade D 6% Grade F 89%
Fail the header check (F)89%vs 82.5% avg
Leak usernames37%vs 38.5% avg
Expose a sensitive file2.3%vs 1.8% avg
Use HTTPS95%vs 96.2% avg

What stands out

TLDWP currently associates 435 indexed WordPress sites with stm-megamenu, equivalent to 0% of the current WordPress dataset.

The largest measured difference is header-grade F: 89.3% versus 82.5% overall (+6.8 percentage points).

Username enumeration is 36.7% vs 38.5% overall (-1.8 pp); HTTPS adoption is 95.2% vs 96.2% overall (-1 pp); Sensitive-file exposure is 2.3% vs 1.8% overall (+0.5 pp).

These are observational associations among sites where TLDWP detected stm-megamenu, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Infrastructure patterns

Infrastructure detected alongside stm-megamenu. Percentages are within sites where that specific signal was detectable; the baseline compares the same signal across detected WordPress sites overall.

Co-occurrence describes technologies observed on the same sites. Detection coverage varies by signal, and an association does not imply that one technology caused or selected another.

stm-megamenu Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Version Exposures Headers Last Checked
a*t*n*o*c*r*.com (WP 7.1) 2.3.14· 60% conf. D Sep 9, 2026
s*c*a*p*c*.nu B Sep 9, 2026
f*r*e*e*t*c*r*.com (WP 6.7.7) F Sep 9, 2026
h*g*t*d*r*b*.com (WP 7.0.3) F Sep 8, 2026
r*z*a*s.com (WP 7.0.4) D Sep 8, 2026
s*n*m*.com F Sep 8, 2026
m*c*n*c*m*d*i*c*r.com (WP 7.1) F Sep 8, 2026
w*z*b*n*e*b*a*s.com (WP 7.1) C Sep 7, 2026
a*j*s*a*.com (WP 7.1) F Sep 7, 2026
b*r*o*o*s.com (WP 7.1) F Sep 7, 2026
d*v*r*a*t*.com (WP 7.0.4) F Sep 7, 2026
d*s*a*t*h*u*.com (WP 6.2.11) F Sep 7, 2026
m*p*i*e*a*s.com (WP 7.0.1) F Sep 7, 2026
e*i*a*l*a*c*.com (WP 7.1) F Sep 7, 2026
h*x*l.com D Sep 7, 2026
k*n*b*d*.com F Sep 7, 2026
k*n*a*d*u*e*a*t*s.com (WP 7.0.4) F Sep 7, 2026
d*s*a*a*c*c*e*.com (WP 6.6.7) F Sep 7, 2026
d*s*a*a*-*c*j*.com (WP 6.6.7) F Sep 7, 2026
m*d*n*l*m*t*r*p*r*.com (WP 7.1) F Sep 7, 2026
e*c*l*u*o*t*d*o.com (WP 7.1) F Sep 7, 2026
h*r*e*a*t*g*o*p.com F Sep 7, 2026
o*t*e*a*t*m*t*v*.com (WP 6.9.7) F Sep 6, 2026
d*n*e*s*m*t*r*.com (WP 7.1) F Sep 6, 2026
n*c*m*e*v*n*l*m*t*d.com (WP 6.5.5) F Sep 6, 2026
e*-*e*s*.com F Sep 5, 2026
y*l*o*v*.com (WP 7.1) F Sep 5, 2026
r*f*c*i*n*s*l*n*a*a*.com (WP 7.1) F Sep 5, 2026
c*n*l*a*k*t*a*s.com F Sep 5, 2026
r*f*n*e*s.c*.nz C Sep 5, 2026
g*r*g*-*a*.fr F Sep 5, 2026
f*r*m*e*d*l*.com (WP 7.1) F Sep 5, 2026
a*e*o*o*s*c.ca (WP 7.1) F Sep 5, 2026
d*i*i*y*m*h*.com (WP 7.0.2) F Sep 5, 2026
d*n*-*t*r.com (WP 6.9.7) F Sep 5, 2026
b*m*a*r*n*e.com (WP 7.0.4) F Sep 5, 2026
r*m*y*u*o*.com (WP 7.0.1) F Sep 5, 2026
h*a*y*r*c*s*a*a*a.com (WP 6.9.7) F Sep 5, 2026
c*m*o*u*a*o.com (WP 7.1) F Sep 5, 2026
d*m*d*i*c.com (WP 7.1) F Sep 5, 2026
d*m*s*o*o*s.com (WP 5.4.21) F Sep 4, 2026
r*c*r*t*j*p*n.com (WP 7.1) F Sep 4, 2026
y*l*a*a*a*a.com (WP 7.1) F Sep 4, 2026
h*n*a*o*o*.net (WP 7.1) D Sep 4, 2026
u*o*a*t*c*r.com (WP 5.5.13) F Sep 4, 2026
m*s*e*s*t*u*o*.com (WP 6.4.3) F Sep 4, 2026
m*s*e*s*f*a*c*.com (WP 6.4.3) F Sep 4, 2026
m*s*e*s*c*r*e*t*a*.com (WP 6.4.3) F Sep 4, 2026
m*s*e*s*b*u*g*s.com (WP 6.4.3) F Sep 4, 2026
m*s*e*s*b*r*e*a*.com (WP 6.4.3) F Sep 4, 2026
m*s*e*s*a*i*n*n.com (WP 6.4.3) F Sep 4, 2026
m*s*e*s*a*n*c*.com (WP 6.4.3) F Sep 4, 2026
m*s*e*s*a*g*u*e*e.com (WP 6.4.3) F Sep 4, 2026
m*s*e*s*a*i*n*.com (WP 6.4.3) F Sep 4, 2026
m*s*e*s*s*i*t*s.com (WP 6.4.3) F Sep 4, 2026
m*s*e*s*s*i*t*b*i*u*.com (WP 6.4.3) F Sep 4, 2026
m*s*e*s*q*i*p*r.com (WP 6.4.3) F Sep 4, 2026
m*s*e*s*o*e*o*.com (WP 6.4.3) F Sep 4, 2026
m*s*e*s*n*o*t.com (WP 6.4.3) F Sep 4, 2026
m*s*e*s*l*r*e*t.com (WP 6.4.3) F Sep 4, 2026
m*s*e*s*l*-*o*h*l*e.com (WP 6.4.3) F Sep 4, 2026
d*l*r*n*.com (WP 7.1) D Sep 4, 2026
t*i*c*s*u*o*.com A Sep 4, 2026
b*w*8*r*u*.com (WP 7.0.4) F Sep 3, 2026
s*r*u*h*i*s*l*4*.com (WP 6.1.12) F Sep 3, 2026
b*c*e*v*h*c*e*.ad (WP 7.1) A Sep 3, 2026
h*y*e*t*r.com (WP 7.1) F Sep 3, 2026
t*x*r*.com (WP 6.1.12) F Sep 3, 2026
s*o*a*s*y*r*t.com (WP 6.7.7) F Sep 3, 2026
o*m*t*r*.com (WP 6.7.1) F Sep 2, 2026
m*r*i*u*o*.com (WP 5.2.3) F Sep 2, 2026
t*w*.com (WP 7.1) F Sep 2, 2026
c*c*e*a*t*g*m*j*e*.com (WP 7.1) F Sep 2, 2026
m*s*u*c*c*e*.c*m.es (WP 7.1) F Sep 2, 2026
a*-*u*o*x*.com (WP 5.5.20) F Sep 2, 2026
t*t*l*o*t*a*e*.com (WP 6.3.3) F Sep 1, 2026
o*a*a*o*o*o*i*.com (WP 6.5.5) F Sep 1, 2026
s*s*a*h*s.it (WP 6.9.7) F Sep 1, 2026
e*u*p*e*t*a*e*d*p*t.com (WP 7.1) F Sep 1, 2026
o*t*n*h*r*w*a*.com F Sep 1, 2026
r*n*y*a*a*.com (WP 6.9.4) F Sep 1, 2026
t*p*r*n*p*c*i*g.com (WP 7.1) F Sep 1, 2026
a*u*i*g*o*u*i*n*.com C Aug 31, 2026
n*l*a*t*.com (WP 7.0.4) F Aug 31, 2026
c*y*t*a*t*c*u*.com (WP 6.9) F Aug 31, 2026
f*r*l*f*.al (WP 7.1) F Aug 31, 2026
t*i*o*.com F Aug 30, 2026
a*m*t*r*s*s*d*s.com (WP 7.1) F Aug 30, 2026
j*n*t*a*s*u*o.com F Aug 30, 2026
l*g*c*r*e*t.com (WP 6.9.7) F Aug 30, 2026
e*r*s*-*e*h*.com (WP 5.5.3) F Aug 30, 2026
c*m*o*s*o*r*s.ca (WP 7.1) F Aug 30, 2026
s*n*t*u*-*i.com (WP 7.0.2) F Aug 30, 2026
l*c*t*o*v*i*u*e*u*n*e.com (WP 6.8.2) F Aug 30, 2026
c*r*4*l*.gr (WP 6.8.2) F Aug 30, 2026
a*l*t*t*a*a*e*.com (WP 7.1) F Aug 30, 2026
m*q*i*a*i*p*r*v*a*.com (WP 7.1) F Aug 30, 2026
l*c*l*u*u*y*u*o.com (WP 7.1) F Aug 30, 2026
a*a*t*t*w*.com (WP 7.0.4) F Aug 30, 2026
m*r*t*a*e*v*c*.com (WP 6.9.4) C Aug 30, 2026