WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: wp-attachments (Used by 434 domains)

Security snapshot

Across 434 wp-attachments WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 1% Grade B 3% Grade C 3% Grade D 7% Grade F 86%
Fail the header check (F)86%vs 82.5% avg
Leak usernames40%vs 38.5% avg
Expose a sensitive file4.4%vs 1.8% avg
Use HTTPS94%vs 96.2% avg

What stands out

TLDWP currently associates 434 indexed WordPress sites with wp-attachments, equivalent to 0% of the current WordPress dataset.

The largest measured difference is header-grade F: 85.9% versus 82.5% overall (+3.4 percentage points).

Sensitive-file exposure is 4.4% vs 1.8% overall (+2.6 pp); HTTPS adoption is 94.2% vs 96.2% overall (-2 pp); Username enumeration is 39.6% vs 38.5% overall (+1.1 pp).

These are observational associations among sites where TLDWP detected wp-attachments, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Infrastructure patterns

Infrastructure detected alongside wp-attachments. Percentages are within sites where that specific signal was detectable; the baseline compares the same signal across detected WordPress sites overall.

Co-occurrence describes technologies observed on the same sites. Detection coverage varies by signal, and an association does not imply that one technology caused or selected another.

WP Attachments

WP Attachments enhances the download experience and file management in WordPress. It automatically displays attachments in your posts and pages, so you don’t need to manually insert download links. Easily attach, unattach, or reattach files directly from the media library. Key Features: – 🤖 Automatically displays attachments after post content – ℹ️ Backend metabox for managing attachments – 🔃 Quick Attach, Unattach, and Reattach actions in the Media Library – 🔢 Download counter with anti-spam and logged-in user filt…

Domain Version Exposures Headers Last Checked
b*z*n*r*.com (WP 7.0.4) C Sep 7, 2026
l*s*a.lt (WP 6.8.8) F Sep 7, 2026
e*h*l*r*t*e*e*t*.com (WP 5.9.16) F Sep 7, 2026
w*n*s*.com (WP 4.7.29) F Sep 7, 2026
r*d*n*e*u*h*m*s*i.pl (WP 7.1) F Sep 7, 2026
p*l*h*w*c*.pl (WP 7.1) A Sep 7, 2026
y*t*s*r*e*n*.com (WP 7.1) F Sep 7, 2026
r*p*t*.es B Sep 7, 2026
s*e*m*o*t*s*o*i*t*o*.se (WP 7.1) D Sep 6, 2026
f*s*a*6.fr (WP 6.9.7) F Sep 6, 2026
e*e*l*t*i*d.com F Sep 6, 2026
d*n*r*n*.com (WP 7.1) F Sep 6, 2026
a*s*m*l*a.cat (WP 7.1) F Sep 6, 2026
g*u*n*-*l*s*o*n.de (WP 6.9.7) F Sep 6, 2026
a*d*m*n*a*.com (WP 7.1) F Sep 6, 2026
a*u*n*i*l*b*e*i*.it F Sep 5, 2026
b*n*e*t*.com (WP 5.9.16) F Sep 5, 2026
r*d*m*t*c*n*t*u*t*o*.com D Sep 5, 2026
e*r*p*e*s*m*q*i*a*i*.com (WP 4.8.25) F Sep 5, 2026
r*d*o*.com (WP 4.9.31) F Sep 5, 2026
k*r*n*k*a*o*a.pl (WP 7.1) F Sep 5, 2026
a*o*o*e*.pl (WP 6.7.7) F Sep 5, 2026
g*o*t*a*e*s*r*c*n*a*e*z*.it (WP 5.2.26) F Sep 5, 2026
m*t*u*o*.com (WP 5.5.1) F Sep 4, 2026
m*t*s*m*o*i*m.com (WP 7.1) F Sep 4, 2026
a*o*a*.it (WP 6.3.2) F Sep 4, 2026
a*i*u*s*u*i*.com (WP 6.4.8) F Sep 4, 2026
d*e*a*s*c*u*m*c*e*.de (WP 7.0) F Sep 4, 2026
c*o*v*l*a*a*i*.org (WP 7.1) F Sep 4, 2026
a*t*o*r*t*h*n*.de D Sep 4, 2026
a*i*u*z.com (WP 6.9.4) F Sep 4, 2026
t*a*h*p*r*e*s*o*.org (WP 7.0) F Sep 4, 2026
s*i*z.us (WP 6.9.7) F Sep 4, 2026
j*s*g*v*m*t*e*a*n*a*u*l.com (WP 7.1) F Sep 3, 2026
a*p*k*n*e*.nl F Sep 3, 2026
e*s*c*.com (WP 4.3.1) F Sep 3, 2026
c*b*r*e*e*s*u*.com (WP 6.4.5) F Sep 3, 2026
s*r*o*a.com F Sep 3, 2026
k*c*n*.org (WP 7.0.4) F Sep 3, 2026
h*w*p*n*s*e*u*l*c.com (WP 6.8.8) F Sep 3, 2026
s*o*i*s*r*e*n*.com F Sep 3, 2026
s*r*e*.gr (WP 7.1) B Sep 2, 2026
j*d*r*n*n*c*d*m*.com (WP 6.9.1) F Sep 2, 2026
w*g*n*w*m*i*g*l*b.o*g.uk F Sep 2, 2026
g*i*t*a*e*n*.fr F Sep 2, 2026
r*t*g*n*c*o*t*e*.com (WP 7.1) F Sep 2, 2026
b*r*g*.c*m.ua (WP 6.1.12) F Sep 1, 2026
a*e*l*e*.pl (WP 7.1) F Sep 1, 2026
h*r*i*g*o*s*a*k*.com F Sep 1, 2026
k*l*o*r*z.ru (WP 6.9.7) F Sep 1, 2026
f*t*g*a*f*.nl (WP 7.1) F Sep 1, 2026
e*u*p*m*e*t*s*p*.com (WP 4.0.38) F Sep 1, 2026
c*7*o*.com F Aug 31, 2026
b*u*a*m*s*h*n*n.de F Aug 31, 2026
o*a*.ci F Aug 31, 2026
i*s*r.org (WP 7.0.4) F Aug 31, 2026
r*n*u*t*o*u*.nl F Aug 31, 2026
b*l*n*h*l*.com F Aug 31, 2026
s*o*i*p*n*e*o*t*l*.org (WP 7.1) F Aug 30, 2026
s*n*e*d*n*a*.com F Aug 30, 2026
l*n*h*m*h*a*r*.ca (WP 7.1) F Aug 30, 2026
y*u*s*o*-*o*e.com F Aug 30, 2026
t*m*a*i*i*t*e.com (WP 6.6.3) F Aug 29, 2026
r*f*o*t*s*e*.o*g.uk F Aug 29, 2026
r*c*n*c*e*t*o*s.com (WP 7.0.4) D Aug 29, 2026
m*n*k*v*c*s*a.cz (WP 7.1) F Aug 29, 2026
e*o*i.e*u.it (WP 5.3.2) F Aug 29, 2026
l*r*o*v*p*.gr (WP 7.1) F Aug 29, 2026
t*a*-*w*.de F Aug 29, 2026
c*b*s.o*g.br F Aug 29, 2026
q*y*o*e*s.com F Aug 29, 2026
t*n*-*u*n*h*n.de (WP 6.1.12) F Aug 29, 2026
t*n*-*e*n*b*g*n.com (WP 6.1.12) F Aug 29, 2026
t*n*-*u*n*h*n.com (WP 6.1.12) F Aug 29, 2026
r*d*p*r*b*z*r*l*h*.de (WP 6.7.7) F Aug 29, 2026
i*q*a*e*n*e*i*i*n*.it F Aug 28, 2026
c*e*t*o*o*l*c*t*o*.com F Aug 28, 2026
l*b*r*l.ru (WP 5.7.5) F Aug 28, 2026
s*n*e*.de F Aug 28, 2026
s*n*e*.cz F Aug 28, 2026
s*i*d*s*i*a*l*s.com (WP 7.1) F Aug 27, 2026
s*i*d*s*i*a*l*s.org (WP 7.1) F Aug 27, 2026
j*n*e*h*a*i*g.com F Aug 27, 2026
c*d*a*t*.org (WP 7.1) F Aug 27, 2026
s*a*u*a*z*.lv F Aug 27, 2026
w*n*o*e*.com F Aug 27, 2026
n*s*y*i*t*e*a*.com F Aug 27, 2026
m*r*-*e*l*t*.cz (WP 7.1) F Aug 27, 2026
p*o*i*r.tv (WP 6.3.1) F Aug 27, 2026
q*j*8.com F Aug 27, 2026
s*h*a*o*o*g*r*.org F Aug 27, 2026
g*p*c*.com (WP 6.9.7) F Aug 27, 2026
u*i*n*g*l*u*a.it (WP 7.0.4) F Aug 26, 2026
a*h*a*s*u*i*.com (WP 4.1.41) F Aug 26, 2026
t*a*e*.eu (WP 7.1) F Aug 26, 2026
b*c*s*u*f.lu (WP 7.0.4) F Aug 26, 2026
s*m*e.org F Aug 26, 2026
l*n*o*a*o*.com F Aug 26, 2026
j*v*n*s*u.org F Aug 26, 2026
i*t*u*i*n*e*.g*v.it (WP 7.0.4) F Aug 26, 2026