Security snapshot
Across 94 um-user-locations WordPress sites indexed by TLDWP, compared to the all-WordPress average.
Grade A 0%
Grade B 5%
Grade C 2%
Grade D 11%
Grade F 82%
Fail the header check (F)82%vs 82.5% avg
Leak usernames34%vs 38.5% avg
Expose a sensitive file1.1%vs 1.8% avg
Use HTTPS97%vs 96.2% avg
What stands out
TLDWP currently associates 94 indexed WordPress sites with um-user-locations, equivalent to 0% of the current WordPress dataset.
The largest measured difference is username enumeration: 34% versus 38.5% overall (-4.5 percentage points).
Sensitive-file exposure is 1.1% vs 1.8% overall (-0.7 pp); Header-grade F is 81.9% vs 82.5% overall (-0.6 pp); HTTPS adoption is 96.8% vs 96.2% overall (+0.6 pp).
These are observational associations among sites where TLDWP detected um-user-locations, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
um-user-locations Premium / Custom
This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.
| Domain | Version | Exposures | Headers | Last Checked |
|---|---|---|---|---|
| e*t*i*h*n*b*a*k*.org (WP 7.0.4) | — | F | Sep 8, 2026 | |
| z*r*p*e*n*s*a*j*.nl (WP 7.1) | — | F | Sep 8, 2026 | |
| c*b*t*l*a.org (WP 6.9.7) | — | F | Sep 7, 2026 | |
| g*s*a*t*d*u*t*o.hr | — | F | Sep 7, 2026 | |
| s*i*m*d*l*.com (WP 7.0.2) | — | F | Sep 6, 2026 | |
| r*s*a*-*s*e*p*t.com (WP 6.9.7) | — | F | Sep 6, 2026 | |
| r*p*o*r*a*f*t*e*s.com (WP 7.1) | — | F | Sep 6, 2026 | |
| r*p*o*r*a*.com (WP 7.1) | — | F | Sep 6, 2026 | |
| t*e*a*i*c*r*l*.c*.uk | — | F | Sep 5, 2026 | |
| h*a*t*a*h*r*v*d*r*.com | — | F | Sep 4, 2026 | |
| h*a*t*a*h*o*c*e*.com | — | F | Sep 4, 2026 | |
| h*a*t*a*h*o*c*.com | — | F | Sep 4, 2026 | |
| a*t*-*a*.com (WP 7.1) | — | F | Sep 3, 2026 | |
| a*s*a*u*a*.o*g.au | — | F | Sep 3, 2026 | |
| t*e*n*.c*.uk | — | F | Sep 1, 2026 | |
| h*r*m*e*n*.com | — | F | Aug 31, 2026 | |
| o*e*n*e*p*o*u*t*.com (WP 7.1) | — | F | Aug 31, 2026 | |
| a*r*n*o*b*r*i*.com | — | F | Aug 29, 2026 | |
| u*c*v*r*i.cz | — | F | Aug 29, 2026 | |
| m*m*c*a*.com (WP 7.0.4) | — | B | Aug 28, 2026 | |
| c*t*p*r*s*.com | — | F | Aug 27, 2026 | |
| c*a*s*s*n*e*x*a*i*i*e*.fr (WP 7.1) | — | F | Aug 26, 2026 | |
| s*a*i*g*i*o*a*.com | — | F | Aug 25, 2026 | |
| a*s*c*a*i*n*t*r*o*r*f*a.it | — | F | Aug 25, 2026 | |
| a*s*c*a*i*n*t*e*a*i*-*e*o*o*c*i*n*e*l*.org (WP 7.1) | — | F | Aug 24, 2026 | |
| p*k*p*p*.com (WP 6.9.7) | — | F | Aug 24, 2026 | |
| b*t*-*k.org | — | D | Aug 23, 2026 | |
| p*d*a*t*r*s.com (WP 6.7.7) | — | F | Aug 23, 2026 | |
| l*t*m*o*v*.com | — | D | Aug 22, 2026 | |
| v*i*f*t*e*s.com (WP 7.0.4) | — | C | Aug 20, 2026 | |
| m*s*c*p*.com | — | D | Aug 19, 2026 | |
| c*m*u*i*i*m*.com | — | F | Aug 19, 2026 | |
| l*c*u*p*o.com (WP 6.3.7) | — | F | Aug 19, 2026 | |
| p*l*e*o*e.com | — | D | Aug 19, 2026 | |
| a*p*m.org | — | F | Aug 18, 2026 | |
| i*b*-*e*t*c*l*n*.de (WP 6.9.7) | — | F | Aug 18, 2026 | |
| a*p*m.fr | — | F | Aug 18, 2026 | |
| g*t*e*l*u*k*y.com (WP 7.0.4) | — | F | Aug 18, 2026 | |
| m*m*r*a*2*2.org (WP 6.7.7) | — | F | Aug 18, 2026 | |
| d*k*o*l*r.eu (WP 7.0.4) | — | D | Aug 18, 2026 | |
| b*r*e*s*e*f.com (WP 7.0.2) | — | F | Aug 18, 2026 | |
| a*c*r*e*n*s*e*.com | — | F | Aug 17, 2026 | |
| p*w*s*.com | — | F | Aug 17, 2026 | |
| c*b*n*u*.org (WP 6.9.7) | — | F | Aug 16, 2026 | |
| 3*o.cz | — | F | Aug 16, 2026 | |
| s*c*f.org (WP 6.9.7) | — | C | Aug 15, 2026 | |
| i*t*g.org | — | F | Aug 15, 2026 | |
| m*m*p.eu (WP 7.0.2) | — | B | Aug 15, 2026 | |
| c*t*o*i*i*f*u*n*e*s.com | — | F | Aug 15, 2026 | |
| i*o*-*e*.com (WP 5.5.20) | — | F | Aug 14, 2026 | |
| o*d*r*e*e*s*l*i*-*p*n*e.nl (WP 6.8.1) | — | F | Aug 14, 2026 | |
| k*n*p*d*a.be | — | F | Aug 7, 2026 | |
| w*n*e*t*e*s.net | — | F | Aug 5, 2026 | |
| p*i*i*p*-*a*a*d*.fr | — | F | Aug 5, 2026 | |
| u*o*i*.tn (WP 5.8.13) | — | F | Aug 4, 2026 | |
| u*o*a.c*.uk | — | F | Aug 1, 2026 | |
| a*t*-*n*.com (WP 7.0) | — | F | Jul 30, 2026 | |
| t*e*a*i*c*r*l*.com | — | F | Jul 30, 2026 | |
| i*c*u*i*e*l*a*e*s*i*.org (WP 7.0.2) | — | F | Jul 30, 2026 | |
| c*o*u*s*l*n*u*d*c.fr | — | F | Jul 29, 2026 | |
| l*e*e*e*g*e*e*a*e*.de (WP 7.0.2) | — | F | Jul 29, 2026 | |
| g*m*e.com | — | F | Jul 29, 2026 | |
| i*b*-*e*t*c*l*n*.com | — | F | Jul 28, 2026 | |
| i*b*-*o*e*t*e*a*i*.com (WP 6.9.5) | — | F | Jul 28, 2026 | |
| m*n*y*l*n*.com (WP 7.0.2) | — | F | Jul 28, 2026 | |
| n*u*o*s*o*o*d.com (WP 6.9.5) | — | F | Jul 27, 2026 | |
| a*t*a*t*.com | — | F | Jul 27, 2026 | |
| m*d*r*p*e*a*o*.com | — | F | Jul 26, 2026 | |
| m*d*l*o*n*c*p*o*i*d*r.com | — | F | Jul 26, 2026 | |
| m*d*l*o*n*c*p*o.com | — | F | Jul 26, 2026 | |
| c*i*z.co | — | F | Jul 26, 2026 | |
| i*s*-*o*i*t*.com (WP 7.0.2) | — | D | Jul 25, 2026 | |
| n*t*l*r*j*w*j*.nl | — | D | Jul 25, 2026 | |
| i*o.global | — | F | Jul 24, 2026 | |
| a*s*r*l*a*n*t*r*s*.au | — | F | Jul 24, 2026 | |
| c*m*u*i*y*e*d*e*w*r*.org (WP 7.0.2) | — | D | Jul 24, 2026 | |
| f*g*t*l*b*a*.com (WP 6.5.3) | — | F | Jul 23, 2026 | |
| c*t*u*.com | — | F | Jul 22, 2026 | |
| e*e*.eu (WP 6.8.2) | — | F | Jul 22, 2026 | |
| c*t*o*i*s*n*i*e.net | — | F | Jul 22, 2026 | |
| s*n*l*m*e*s*n*l*.nl | — | F | Jul 22, 2026 | |
| d*k*o*l*r.uk (WP 7.0.2) | — | D | Jul 21, 2026 | |
| d*k*o*l*r.fi (WP 7.0.2) | — | D | Jul 21, 2026 | |
| w*p*o*o*n*a*i*n.o*g.in | — | B | Jul 21, 2026 | |
| w*p*o*o*n*a*i*n.org | — | B | Jul 21, 2026 | |
| a*t*u*i*e*s*.org | — | B | Jul 20, 2026 | |
| k*t*e*m*k*e*.com (WP 7.0.2) | — | F | Jul 20, 2026 | |
| b*g*o*.de (WP 6.7.5) | — | F | Jul 19, 2026 | |
| i*o*t*o.org | — | F | Jul 19, 2026 | |
| b*e*f*b*o*d*a*u*t*i*e.org | — | F | Jul 19, 2026 | |
| y*t*.org | — | F | Jul 19, 2026 | |
| c*p*m*.fr (WP 7.0.2) | — | F | Jul 19, 2026 | |
| a*t*-*n*.c*.uk (WP 7.0) | — | F | Jul 19, 2026 | |
| i*n*t*l*n*i*l*n*.org | — | F | Jul 18, 2026 |
Page 1 of 1