WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: windsor-strava-athlete (Used by 4 domains)

Security snapshot

Across 4 windsor-strava-athlete WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 0% Grade C 0% Grade D 0% Grade F 100%
Fail the header check (F)100%vs 82.5% avg
Leak usernames75%vs 38.5% avg
Expose a sensitive file25%vs 1.8% avg
Use HTTPS100%vs 96.2% avg

What stands out

TLDWP currently associates 4 indexed WordPress sites with windsor-strava-athlete, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 75% versus 38.5% overall (+36.5 percentage points).

Sensitive-file exposure is 25% vs 1.8% overall (+23.2 pp); Header-grade F is 100% vs 82.5% overall (+17.5 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp).

These are observational associations among sites where TLDWP detected windsor-strava-athlete, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

windsor-strava-athlete Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
e*i*-*o*g*r.com (WP 7.1) F Sep 1, 2026
s*c*n*s*b*a*i*a*.com F Aug 22, 2026
t*e*v*r*d*y*p*p*a*y.com (WP 7.1) F Aug 21, 2026
a*r*r*n*u*n*r.com (WP 6.8.6) F Jul 30, 2026