WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: tfimage-box (Used by 37 domains)

Security snapshot

Across 37 tfimage-box WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 5% Grade C 3% Grade D 3% Grade F 89%
Fail the header check (F)89%vs 82.6% avg
Leak usernames32%vs 38.6% avg
Expose a sensitive file2.7%vs 1.8% avg
Use HTTPS95%vs 96.3% avg

What stands out

TLDWP currently associates 37 indexed WordPress sites with tfimage-box, equivalent to 0% of the current WordPress dataset.

The largest measured difference is header-grade F: 89.2% versus 82.6% overall (+6.6 percentage points).

Username enumeration is 32.4% vs 38.6% overall (-6.2 pp); HTTPS adoption is 94.6% vs 96.3% overall (-1.7 pp); Sensitive-file exposure is 2.7% vs 1.8% overall (+0.9 pp).

These are observational associations among sites where TLDWP detected tfimage-box, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

tfimage-box Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Version Exposures Headers Last Checked
f*l*s*r*i*e*s*u*o.de (WP 7.1) F Sep 9, 2026
e*g*y*l*a*.com (WP 5.7.1) F Sep 8, 2026
e*s*l*n*l*k*r*n*k.com (WP 7.1) F Sep 5, 2026
j*n*t*a*h*k*.com (WP 7.1) F Sep 4, 2026
z*c*u*a*.com F Sep 4, 2026
i*s*r*m*n*a*a*e*o*t*o*e.c*m.br F Sep 4, 2026
r*d*o*r*t*c*o*a*r*t*c*.c*m.br F Sep 4, 2026
l*n*e*a*i*.c*m.br F Sep 4, 2026
m*c*m*n*c*c*o*e*.c*m.ec (WP 7.1) F Sep 4, 2026
t*a*s*o*m*k.com (WP 7.1) C Sep 3, 2026
a*a*d*s*7*a*v*n*u*e*.com (WP 6.8.1) F Sep 2, 2026
o*s*g*o*p.com (WP 7.1) F Sep 1, 2026
c*g*e.com D Aug 29, 2026
h*i*w*z*r*s*a*b*r*h*p.com (WP 7.1) F Aug 29, 2026
p*d*a.org (WP 7.1) F Aug 27, 2026
l*n*e*r*s*l.com F Aug 26, 2026
g*u*o*o*a*i*.com (WP 7.1) B Aug 24, 2026
2*i*m*r*e*s.com (WP 7.1) F Aug 23, 2026
c*d*m*-*u*d*l*u*e.com (WP 5.8.15) F Aug 23, 2026
p*o*s*e*e*s.com (WP 5.6.19) F Aug 19, 2026
a*o*o*.de (WP 7.0.2) F Aug 18, 2026
m*d*a*c*p*.c*.in F Aug 17, 2026
e*r*s*a*e*.nl (WP 7.0.4) F Aug 16, 2026
o*s*g*o*p.fr (WP 7.0.4) F Aug 15, 2026
e*g*y*l*a*.c*.uk F Aug 3, 2026
c*a*l*n*e*a*h*.com F Jul 31, 2026
t*l*c*f*.g*v.co (WP 7.0.2) F Jul 30, 2026
i*s*c*-*a.com F Jul 29, 2026
c*r*o*l*g*s*i*a.com (WP 7.0.2) F Jul 29, 2026
a*l*n*i*z*r*a*.com (WP 7.0.2) F Jul 29, 2026
p*e*a*l*a.com F Jul 28, 2026
c*m*i*g*a*k*t*n*.com (WP 7.0.2) F Jul 26, 2026
b*l*u*g*z*n*r*m*p*r*a*e*s.de (WP 7.0.2) F Jul 25, 2026
p*e*o*a*a*o*i*.cl (WP 7.0.2) F Jul 25, 2026
r*m*r*n*n*e*n*c*o*a*.com (WP 7.0.2) B Jul 23, 2026
d*l*w*r*w*t*o*l.com (WP 7.0) F Jul 20, 2026
s*f*e*n*.net (WP 7.0.2) F Jul 18, 2026