Security snapshot
Across 7 unfc-normalize WordPress sites indexed by TLDWP, compared to the all-WordPress average.
What stands out
TLDWP currently associates 7 indexed WordPress sites with unfc-normalize, equivalent to 0% of the current WordPress dataset.
The largest measured difference is username enumeration: 85.7% versus 38.5% overall (+47.2 percentage points).
Sensitive-file exposure is 14.3% vs 1.8% overall (+12.5 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp); Header-grade F is 85.7% vs 82.5% overall (+3.2 pp).
These are observational associations among sites where TLDWP detected unfc-normalize, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
UNFC Nörmalize
This is a souped-up version of the Normalizer plugin by Torsten Landsiedel. It adds WP filters to normalize UTF-8 data coming into the system to the de facto web standard Normalization Form C. The Unicode Consortium report is at Unicode Normalization Forms. Polyfills For best performance install (if possible) the PHP Internationalization extension Intl, which includes the PHP class Normalizer.…
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| s*c*n*e*t.com (WP 6.9.7) | F | Sep 6, 2026 | |
| t*r*e*o*c*.es (WP 5.5.3) | F | Aug 30, 2026 | |
| g*l*v*i*.com (WP 7.0.4) | F | Aug 29, 2026 | |
| n*s*i*u*c*m*u*s.com | F | Aug 17, 2026 | |
| d*b*a*t*.vn | B | Aug 3, 2026 | |
| a*e*c*n*u*t*n*y.com (WP 5.3.21) | F | Jul 21, 2026 | |
| c*a*l*s*i*l*n.com (WP 6.9.5) | F | Jul 20, 2026 |