WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: vastart-addon (Used by 13 domains)

Security snapshot

Across 13 vastart-addon WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Security metrics currently cover 12 matching records in the cached metrics snapshot.

Grade A 0% Grade B 0% Grade C 0% Grade D 0% Grade F 100%
Fail the header check (F)100%vs 82.5% avg
Leak usernames50%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS100%vs 96.2% avg

What stands out

TLDWP currently associates 13 indexed WordPress sites with vastart-addon, equivalent to 0% of the current WordPress dataset.

The largest measured difference is header-grade F: 100% versus 82.5% overall (+17.5 percentage points).

Username enumeration is 50% vs 38.5% overall (+11.5 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).

These are observational associations among sites where TLDWP detected vastart-addon, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

vastart-addon Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
m*s*e*y*.com (WP 6.9.7) F Sep 7, 2026
r*a*l*v*e*.com (WP 6.1.12) F Sep 3, 2026
r*a*y*a*e*e*s*t*p*o.com (WP 7.1) F Sep 3, 2026
t*c*x*l*.com (WP 7.1) F Aug 30, 2026
w*s*p*r*e*t.com (WP 6.8.8) F Aug 28, 2026
4*m*i*i*a*.in (WP 7.0.4) F Aug 19, 2026
s*r*o*c*n*a.com F Aug 16, 2026
w*n*e*i*e*.com (WP 6.6.5) F Jul 30, 2026
a*m*r*e.es (WP 6.9.4) F Jul 29, 2026
a*e*o*l*n*.com (WP 7.0.2) F Jul 25, 2026
o*c*r*a*t*g*n*.com F Jul 21, 2026
d*d*c*t*d*m*i*s.com (WP 6.2.9) F Jul 19, 2026