WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: wcspots (Used by 5 domains)

Security snapshot

Across 5 wcspots WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 0% Grade C 0% Grade D 0% Grade F 100%
Fail the header check (F)100%vs 82.5% avg
Leak usernames60%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS100%vs 96.2% avg

What stands out

TLDWP currently associates 5 indexed WordPress sites with wcspots, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 60% versus 38.5% overall (+21.5 percentage points).

Header-grade F is 100% vs 82.5% overall (+17.5 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).

These are observational associations among sites where TLDWP detected wcspots, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

WCSpots

👤 Micemade

Introducing WCSpots – our WooCommerce Product Hotspot Gutenberg Block – the ultimate solution for showcasing your products in a creative and interactive way! With our plugin, you can easily create a custom image with hotspots that link to selected WooCommerce products. Simply select the products you want to showcase, upload an image, and add hotspots on top. Eac…

Domain Exposures Headers Last Checked
m*j*a*o*l*c*i*e.com (WP 7.0.4) F Aug 26, 2026
h*l*i*g*.ru (WP 7.1) F Aug 26, 2026
c*s*l*c*c.com (WP 6.9.5) F Jul 31, 2026
p*a*i*u*d*y*a*l*o*l*.com (WP 7.0.2) F Jul 25, 2026
m*e*t*n*u*i*n*s.lt F Jul 24, 2026