Security snapshot
Across 239 um-user-photos WordPress sites indexed by TLDWP, compared to the all-WordPress average.
Security metrics currently cover 246 matching records in the cached metrics snapshot.
Grade A 1%
Grade B 3%
Grade C 4%
Grade D 11%
Grade F 80%
Fail the header check (F)80%vs 82.6% avg
Leak usernames33%vs 38.6% avg
Expose a sensitive file3.7%vs 1.8% avg
Use HTTPS94%vs 96.3% avg
What stands out
TLDWP currently associates 239 indexed WordPress sites with um-user-photos, equivalent to 0% of the current WordPress dataset.
The largest measured difference is username enumeration: 32.5% versus 38.6% overall (-6.1 percentage points).
Header-grade F is 80.1% vs 82.6% overall (-2.5 pp); HTTPS adoption is 93.9% vs 96.3% overall (-2.4 pp); Sensitive-file exposure is 3.7% vs 1.8% overall (+1.9 pp).
These are observational associations among sites where TLDWP detected um-user-photos, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
um-user-photos Premium / Custom
This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.
| Domain | Version | Exposures | Headers | Last Checked |
|---|---|---|---|---|
| e*o*.no | — | F | Sep 10, 2026 | |
| b*r*o*t*e*z*e*k.de | 2.2.0· 85% conf. | B | Sep 10, 2026 | |
| s*e*v*.com (WP 7.0.4) | 2.1.9· 85% conf. | F | Sep 10, 2026 | |
| e*p*s*d*i*s*.org (WP 7.1) | 2.2.0· 85% conf. | F | Sep 9, 2026 | |
| e*p*s*d*a*s.org (WP 7.1) | 2.2.0· 85% conf. | F | Sep 9, 2026 | |
| h*b*z.c*.uk (WP 7.1) | 2.2.0· 85% conf. | F | Sep 9, 2026 | |
| e*g*g*.com (WP 7.1) | 2.2.0· 85% conf. | F | Sep 8, 2026 | |
| r*e*u*n*g*t*f.com | — | F | Sep 8, 2026 | |
| e*p*-*i*.com (WP 7.0.4) | — | D | Sep 8, 2026 | |
| v*r*u*i*s*l*c*.org (WP 7.0.4) | — | D | Sep 7, 2026 | |
| d*m*n*c*d*n.c*.uk | — | F | Sep 7, 2026 | |
| a*l*h*i*e*m*t*e*.org (WP 7.1) | — | F | Sep 7, 2026 | |
| t*o*s*e*e*a*e.com | — | F | Sep 7, 2026 | |
| f*d*s.net (WP 7.0.2) | — | F | Sep 7, 2026 | |
| t*i*t*t*t*l*n*.com | — | F | Sep 7, 2026 | |
| 1*0*n*c*t.de (WP 7.1) | — | D | Sep 7, 2026 | |
| l*g*c*m.cm (WP 7.1) | — | F | Sep 7, 2026 | |
| v*r*u*i*s*l*c*.com (WP 7.0.4) | — | D | Sep 6, 2026 | |
| r*s*a*-*s*e*p*t.com (WP 6.9.7) | — | F | Sep 6, 2026 | |
| r*p*o*r*a*f*t*e*s.com (WP 7.1) | — | F | Sep 6, 2026 | |
| r*p*o*r*a*.com (WP 7.1) | — | F | Sep 6, 2026 | |
| n*c*r*d*c*p*o*o*r*p*e*.com | — | F | Sep 6, 2026 | |
| b*o*a*s*i*.com | — | F | Sep 6, 2026 | |
| d*p*l*s*l*n*s*a*t*p.com | — | F | Sep 5, 2026 | |
| i*s*e*.eu (WP 7.1) | — | F | Sep 5, 2026 | |
| h*a*t*a*h*r*v*d*r*.com | — | F | Sep 4, 2026 | |
| h*a*t*a*h*o*c*e*.com | — | F | Sep 4, 2026 | |
| h*a*t*a*h*o*c*.com | — | F | Sep 4, 2026 | |
| e*h*c*i*t*e*t*e*t.com (WP 7.0.4) | — | F | Sep 4, 2026 | |
| m*t*h*f*m*e.com | — | F | Sep 4, 2026 | |
| d*m*n*c*d*n.com | — | F | Sep 4, 2026 | |
| s*a*t*h*n*3*l*.com (WP 6.8.8) | — | F | Sep 4, 2026 | |
| i*i*c.com | — | F | Sep 4, 2026 | |
| i*n*t*p*o*i*.com | — | C | Sep 4, 2026 | |
| r*a*n*e.com (WP 7.1) | — | F | Sep 4, 2026 | |
| b*u*l*g*n.com (WP 6.1.12) | — | B | Sep 3, 2026 | |
| n*c*n*e*t*o*s.com (WP 7.1) | — | F | Sep 3, 2026 | |
| h*c*n*e*t*r*w.com | — | F | Sep 3, 2026 | |
| p*c*a*t*.com (WP 7.1) | — | F | Sep 3, 2026 | |
| a*s*a*u*a*.o*g.au | — | F | Sep 3, 2026 | |
| o*a*a*e*c*u*.com (WP 7.1) | — | C | Sep 2, 2026 | |
| m*r*y*a*i*b*a*.com (WP 7.1) | — | F | Sep 2, 2026 | |
| s*b*d*b*i.com (WP 7.1) | — | C | Sep 2, 2026 | |
| a*t*u*s*.o*g.uk | — | F | Sep 2, 2026 | |
| t*t*l*e*p*s*r*.com (WP 7.0.4) | — | D | Sep 1, 2026 | |
| c*d*l*n*c*m*o*t*o*n*e.com | — | F | Sep 1, 2026 | |
| m*v*e*a*.ir (WP 7.1) | — | F | Sep 1, 2026 | |
| a*a*e*i*d*m*s*c*c*i*t*a*a.com (WP 6.9.7) | — | F | Aug 31, 2026 | |
| l*o*m*s.com | — | F | Aug 31, 2026 | |
| a*o*e*o*t*n*.com | — | A | Aug 31, 2026 | |
| a*o*e*o*p*t*r.com | — | A | Aug 31, 2026 | |
| a*m*n*b*o*h*r*b*n*.com | — | F | Aug 30, 2026 | |
| m*r*h*c*e*t*o*.com | — | A | Aug 30, 2026 | |
| r*e*g.com | — | F | Aug 30, 2026 | |
| i*e*d*h*t*g*a*h*.com (WP 7.0.4) | — | D | Aug 30, 2026 | |
| y*u*g*p.com | — | F | Aug 30, 2026 | |
| j*h*r*g*r*o*.com (WP 6.7.7) | — | F | Aug 30, 2026 | |
| l*e*a*s*i*.org (WP 7.1) | — | F | Aug 29, 2026 | |
| y*u*c*m*e*s*r*i*e.com (WP 7.1) | — | F | Aug 29, 2026 | |
| a*l*a*b*o*h*r*b*n*.com | — | F | Aug 29, 2026 | |
| a*l*a*b*o*h*r*.com | — | F | Aug 29, 2026 | |
| a*l*a*b*o*.com | — | F | Aug 29, 2026 | |
| a*r*n*o*b*r*i*.com | — | F | Aug 29, 2026 | |
| u*c*v*r*i.cz | — | F | Aug 29, 2026 | |
| g*l*-*a*c*.com | — | F | Aug 29, 2026 | |
| n*k*i*d.com | — | D | Aug 29, 2026 | |
| t*d*k*l*-*a*c*i*g.com | — | F | Aug 28, 2026 | |
| y*z*a*c*.ir (WP 6.8.8) | — | F | Aug 28, 2026 | |
| t*e*a*l*b*e*s*b*o*.com | — | F | Aug 28, 2026 | |
| q*e*r*r*h*b.com | — | F | Aug 28, 2026 | |
| c*u*t*r*e*d*c*e*a*r*o*s.org | — | F | Aug 26, 2026 | |
| c*s*.org | — | F | Aug 26, 2026 | |
| t*i*o*o*m*t*h*n*.com | — | F | Aug 26, 2026 | |
| c*e*t*r*-*a*d*n.com (WP 7.1) | — | F | Aug 26, 2026 | |
| m*j*r*i*i*s*o*f*r*n*e.com | — | F | Aug 26, 2026 | |
| a*l*n*a*h*t*g*a*h*g*o*p.org | — | F | Aug 26, 2026 | |
| b*t*n*c*.com (WP 7.1) | — | F | Aug 26, 2026 | |
| g*o*a*m*d*a*o*u*s.com | — | F | Aug 25, 2026 | |
| e*c*p*d*c*n.net | — | F | Aug 25, 2026 | |
| b*s*b*e*s*s*t*s.com | — | F | Aug 25, 2026 | |
| m*s*c*a*s*o*m*s*c*a*s.org | — | F | Aug 25, 2026 | |
| f*r*t*e*v*m*a*i.org (WP 7.1) | — | F | Aug 25, 2026 | |
| t*b*b*e.com (WP 6.7.1) | — | D | Aug 25, 2026 | |
| c*n*e*f*r*n*h*o*o*o*h*.org | — | D | Aug 25, 2026 | |
| e*i*e*r*r*f*l*s.com | — | F | Aug 25, 2026 | |
| a*l*n*e*e*d*n*a*e*c*e*.org | — | F | Aug 24, 2026 | |
| w*a*s*o*n*o*4*o*.com (WP 7.0.4) | — | F | Aug 24, 2026 | |
| s*l*-*s*h*t*c*s*l*n*m*t*h*n*.com | — | F | Aug 24, 2026 | |
| c*l*a*s*g*r.com | — | B | Aug 24, 2026 | |
| i*n*v*t*i*c.org (WP 7.1) | — | F | Aug 24, 2026 | |
| p*d*a*t*l*c*.com (WP 7.0.4) | — | D | Aug 23, 2026 | |
| w*s*p*r*.com | — | F | Aug 23, 2026 | |
| p*a*g*v*r*o*s*l*b.com | — | F | Aug 23, 2026 | |
| p*c*a*t*.org (WP 7.1) | — | F | Aug 23, 2026 | |
| g*o*r*d*e*6*.com | — | F | Aug 23, 2026 | |
| b*l*a*d*i*l*m*s*c.com | — | F | Aug 23, 2026 | |
| j*h*y*n.com | — | D | Aug 23, 2026 | |
| p*o*o*a*i*e*e*a*e.com | — | F | Aug 22, 2026 | |
| l*t*o*t*o*r*.com | — | B | Aug 22, 2026 | |
| m*h*m*d*r*.com | — | F | Aug 22, 2026 |
Page 1 of 3
Next »