WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: tcbfw (Used by 12 domains)

Security snapshot

Across 12 tcbfw WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 0% Grade C 0% Grade D 0% Grade F 100%
Fail the header check (F)100%vs 82.5% avg
Leak usernames17%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS92%vs 96.2% avg

What stands out

TLDWP currently associates 12 indexed WordPress sites with tcbfw, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 16.7% versus 38.5% overall (-21.8 percentage points).

Header-grade F is 100% vs 82.5% overall (+17.5 pp); HTTPS adoption is 91.7% vs 96.2% overall (-4.5 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).

These are observational associations among sites where TLDWP detected tcbfw, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

tcbfw Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
s*p*d*a*d*r.com F Sep 7, 2026
2*2*c.org (WP 6.7.2) F Aug 23, 2026
t*h*a*c*o*i*g.com (WP 5.9.16) F Aug 21, 2026
2*2*i*l*c*l*e*e.com (WP 6.7.2) F Aug 16, 2026
2*2*c.com (WP 6.7.2) F Aug 16, 2026
c*x*m*r*b*t.com (WP 7.0.4) F Aug 15, 2026
r*t*n*p*.ru F Jul 31, 2026
d*i*s*t*.ru (WP 7.0.2) F Jul 26, 2026
i*a*s*h*l*.com F Jul 21, 2026
a*r*c*a*s*c.top (WP 7.0.2) F Jul 18, 2026
a*r*c*a*s*c.com (WP 7.0.2) F Jul 18, 2026
d*s*c*r*t*s*o*.com (WP 5.6) F Jul 18, 2026