WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: tismy-user-profile-upload (Used by 9 domains)

Security snapshot

Across 9 tismy-user-profile-upload WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 11% Grade C 11% Grade D 0% Grade F 78%
Fail the header check (F)78%vs 82.5% avg
Leak usernames44%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS89%vs 96.2% avg

What stands out

TLDWP currently associates 9 indexed WordPress sites with tismy-user-profile-upload, equivalent to 0% of the current WordPress dataset.

The largest measured difference is HTTPS adoption: 88.9% versus 96.2% overall (-7.3 percentage points).

Username enumeration is 44.4% vs 38.5% overall (+5.9 pp); Header-grade F is 77.8% vs 82.5% overall (-4.7 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).

These are observational associations among sites where TLDWP detected tismy-user-profile-upload, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Tismy User Profile Upload

Sometimes handing your site over to clients or when you run a site with multiple users if can be a pain to explain how your users can create their own profile picture for comments or any other custom functionality that uses the get_avatar() function. Before they would have to create a global Gravatar account which is fine if that’s what you want however, with this plugin there is no need to rely on your users having a Gravatar account. T…

Domain Exposures Headers Last Checked
r*d*i*h*d*s*r*c*t*u*s.com (WP 5.7.17) F Sep 5, 2026
t*r*y*t*e*s*r*s.com (WP 7.0.4) F Sep 3, 2026
t*u*a*k*o*d*e*s.com (WP 7.1) F Aug 30, 2026
s*h*i*r*t*f*p*e*s*.com (WP 5.7.17) F Aug 20, 2026
u*e*o*t*o*i*.org B Aug 6, 2026
f*u*c*e*k*m*n*e*s.com F Jul 31, 2026
t*a*r*s*d*n*s.com F Jul 24, 2026
c*r*o*a*e*a*p*n*.ca (WP 6.4.8) C Jul 20, 2026
d*a*n*s*s*e*n*e*.com (WP 7.0.2) F Jul 18, 2026