WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: valabi-admin-app (Used by 9 domains)

Security snapshot

Across 9 valabi-admin-app WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 0% Grade C 0% Grade D 0% Grade F 100%
Fail the header check (F)100%vs 82.5% avg
Leak usernames100%vs 38.5% avg
Expose a sensitive file33.3%vs 1.8% avg
Use HTTPS100%vs 96.2% avg

What stands out

TLDWP currently associates 9 indexed WordPress sites with valabi-admin-app, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 100% versus 38.5% overall (+61.5 percentage points).

Sensitive-file exposure is 33.3% vs 1.8% overall (+31.5 pp); Header-grade F is 100% vs 82.5% overall (+17.5 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp).

These are observational associations among sites where TLDWP detected valabi-admin-app, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Domain Exposures Headers Last Checked
e*i*q*s*m.com (WP 7.1) F Sep 7, 2026
j*w*n*a*e.com (WP 7.1) F Sep 4, 2026
k*t*o*i*e*h*.com (WP 7.0.4) F Sep 2, 2026
c*r*y*r*s*o*.com (WP 7.1) F Sep 1, 2026
b*l*a*o.org (WP 7.1) F Aug 29, 2026
a*e*e*j*b*r*.com (WP 7.1) F Aug 22, 2026
s*r*n*a*l*r*.com (WP 7.1) F Aug 21, 2026
r*k*g*l.com (WP 7.0.2) F Jul 22, 2026
k*o*h*r*.com (WP 6.9.5) F Jul 20, 2026