WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: wp-express-checkout (Used by 448 domains)

Security snapshot

Across 448 wp-express-checkout WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 1% Grade B 1% Grade C 2% Grade D 6% Grade F 89%
Fail the header check (F)89%vs 82.5% avg
Leak usernames37%vs 38.5% avg
Expose a sensitive file2.5%vs 1.8% avg
Use HTTPS93%vs 96.2% avg

What stands out

TLDWP currently associates 448 indexed WordPress sites with wp-express-checkout, equivalent to 0% of the current WordPress dataset.

The largest measured difference is header-grade F: 89.3% versus 82.5% overall (+6.8 percentage points).

HTTPS adoption is 93.1% vs 96.2% overall (-3.1 pp); Username enumeration is 36.9% vs 38.5% overall (-1.6 pp); Sensitive-file exposure is 2.5% vs 1.8% overall (+0.7 pp).

These are observational associations among sites where TLDWP detected wp-express-checkout, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Infrastructure patterns

Infrastructure detected alongside wp-express-checkout. Percentages are within sites where that specific signal was detectable; the baseline compares the same signal across detected WordPress sites overall.

Co-occurrence describes technologies observed on the same sites. Detection coverage varies by signal, and an association does not imply that one technology caused or selected another.

WP Express Checkout (Fast Payments via PayPal & Stripe)

The WP Express Checkout plugin allows you to sell any type of products and services from your WordPress powered site easily using fast checkout options from PayPal and Stripe. Install the plugin, configure some basic settings, create a few products and you are ready to sell products and services from your site. The checkout process is quick and easy. This plugin gives you shortcodes to generate customizable payment buttons that allow customers to pay for items instantly via a payment popup window.…

Domain Exposures Headers Last Checked
p*a*s*p*.press (WP 7.1) F Sep 8, 2026
s*u*h*r*s*u*s*a*i*n*h*r*s.com (WP 7.1) F Sep 8, 2026
s*u*h*a*o*i*a*o*i*t*h*l*.com (WP 7.1) F Sep 8, 2026
d*v*d*o*l*w*i*h*.com (WP 6.7.7) F Sep 8, 2026
j*-*u*f*o*r*s.de (WP 7.1) F Sep 8, 2026
b*a*d*n*i*h*e*l*w*e*.com F Sep 8, 2026
i*c*h*l*p*i*e*.org F Sep 8, 2026
c*c*h*l*p*i*e*.org F Sep 8, 2026
s*n*y*o*l*r.com (WP 7.1) F Sep 8, 2026
k*r*i*a*l*c*a*h*n*.com F Sep 8, 2026
t*u*c*e*t*v*t*w*t*i*.com F Sep 7, 2026
d*v*n*e*c*p*s.com C Sep 7, 2026
h*p*r*o*e.ca (WP 7.0.4) F Sep 7, 2026
r*v*s*a*a*o*a*a*.com (WP 7.0.4) F Sep 7, 2026
w*l*b*a*k*e*r*s*u*i*.com (WP 7.1) F Sep 7, 2026
k*r*n*u*m*n*.com (WP 7.0.4) F Sep 7, 2026
k*r*n*o*m*n*.com (WP 7.0.4) F Sep 7, 2026
a*i*a*e*d*l*z.com F Sep 7, 2026
t*i*m*h*f*o*d.com (WP 7.1) F Sep 7, 2026
y*u*a*c*l*m*a*m*r*l.com (WP 7.0.4) F Sep 7, 2026
a*w*c*n*e*e*c*.org (WP 7.1) F Sep 7, 2026
c*t*n*e*n*t*o*a*.org F Sep 7, 2026
c*n*i*i*n*d*e*p*n*e.us (WP 7.1) F Sep 7, 2026
r*s*i*g*i*e.com (WP 7.0.4) F Sep 7, 2026
h*r*t*g*f*r*s*o*.com (WP 7.1) F Sep 6, 2026
h*r*t*g*f*r*p*a.com (WP 7.1) F Sep 6, 2026
d*i*.org (WP 7.0.4) F Sep 6, 2026
m*z*l*h*i*e*s.com (WP 6.9.7) F Sep 6, 2026
j*c*c*n*e*e*c*a*i*m*2*2*.com (WP 7.1) F Sep 6, 2026
e*p*e*d*r*l*s.com (WP 7.1) F Sep 6, 2026
d*s*n*o*t*m*n*s.com (WP 7.1) F Sep 6, 2026
a*d*e*m*i*r*t*.com (WP 6.2.2) F Sep 6, 2026
r*g*a*s*a*i*n*h*r*s.com F Sep 6, 2026
h*l*-*o*l*e*.com (WP 7.1) F Sep 6, 2026
p*e*t*g*w*.c*m.au (WP 7.1) F Sep 6, 2026
r*p*o*i*l*.com (WP 6.5.3) F Sep 6, 2026
i*p*p*i*i*p*n*s.org (WP 7.0.4) F Sep 6, 2026
b*o*m*s*c*y*i*s.com F Sep 5, 2026
b*a*k*a*v*s.travel F Sep 5, 2026
d*l*b*a*s*o*a*e.com F Sep 5, 2026
r*d*e*t*r*n*.com (WP 6.8.8) F Sep 5, 2026
s*i*p*t*o*j*y.com (WP 7.0.4) F Sep 5, 2026
e*r*p*a*m*c*.com (WP 7.1) F Sep 5, 2026
p*r*l*n*h*n*w*a*e*s*u*l*.org (WP 7.1) F Sep 5, 2026
d*t*r*y*o*n*.com F Sep 4, 2026
j*s*p*a*a*d*n*e.com F Sep 4, 2026
n*h*r*l*.com (WP 7.1) F Sep 4, 2026
h*a*t*f*a*e*i*i*g.com (WP 7.0.4) F Sep 4, 2026
h*a*t*i*h*e*t*r*r*s*s.com (WP 7.0.4) F Sep 4, 2026
s*c*c*d*m*l*c.com F Sep 4, 2026
d*a*v*e*.com (WP 7.0.4) F Sep 4, 2026
d*5*e*i*n.com (WP 6.8.3) F Sep 4, 2026
b*l*i*o*e*r*a*u*n*r*.org F Sep 4, 2026
t*u*y*l*v*l*n*.com F Sep 4, 2026
m*s*a*e*e*u*y*a*d*.com (WP 7.1) F Sep 4, 2026
e*t*f*e*i*n.com (WP 7.1) A Sep 3, 2026
k*d*u*o*g*l*.com (WP 7.1) F Sep 3, 2026
c*r*n*o*o.o*g.uk F Sep 3, 2026
a*e*i*a*b*l*y*r.com (WP 7.1) F Sep 3, 2026
a*a*a*s*s*.com (WP 6.9.7) F Sep 3, 2026
r*a*e*r*c*.com F Sep 3, 2026
a*c*r*o.com (WP 7.1) F Sep 3, 2026
v*r*i*.co (WP 7.1) F Sep 3, 2026
c*a*h*l*p*i*e*.com F Sep 3, 2026
p*s*u*a.cz (WP 7.1) F Sep 3, 2026
t*o*s*o*t*e*o*r*e*.com F Sep 3, 2026
n*t*i*s*.c*.uk (WP 7.0.4) A Sep 3, 2026
o*a*l*n*a*p*n*n*s.com F Sep 2, 2026
r*g*n*e*t*i*m*n*.com (WP 7.1) F Sep 2, 2026
d*e*a*s*o*t*b.com (WP 7.1) F Sep 2, 2026
a*o*m*r*i*l*l*a*i*g*e*v*c*i*c.com F Sep 2, 2026
c*r*o*e*t*o*m*c*o*m*r*s*s.com (WP 7.1) F Sep 2, 2026
z*n*p*r*i*e*.com (WP 7.1) F Sep 2, 2026
i*p*p*n*a*l.com (WP 6.9.4) F Sep 2, 2026
p*n*r*c*n*g*t.com F Sep 2, 2026
t*u*h*d*s*o*r*a*e*c*.com (WP 7.0.4) F Sep 1, 2026
r*s*o*i*a*.com (WP 7.1) F Sep 1, 2026
t*u*k*l*o*t*o*r.com F Sep 1, 2026
c*e*h*s*o*a*s*u*i*s.com (WP 7.1) F Sep 1, 2026
c*i*a*d*t*c*r*.com F Sep 1, 2026
h*r*a*c.com F Aug 31, 2026
p*b*i*p*o*u*e*e*t.org (WP 7.1) B Aug 31, 2026
p*b*i*p*o*u*e*e*t.ng (WP 7.1) B Aug 31, 2026
r*l*y*o*n*c*i*n.com B Aug 31, 2026
a*p*a*o*l*w*d*t*a*e*.com (WP 6.7.7) F Aug 31, 2026
w*u*i.net (WP 7.1) F Aug 31, 2026
n*o*e*i*a*a*e*y.c*m.au (WP 7.0) F Aug 31, 2026
n*r*h*r*a*w*y*c.org F Aug 31, 2026
g*o*a*c*n*r*.ca (WP 7.1) F Aug 31, 2026
r*i*e*b*c*m*n*.com (WP 6.9.7) F Aug 31, 2026
b*z*o*a.com (WP 6.6.7) F Aug 30, 2026
c*o*n*-*a*d*.com (WP 6.5.8) F Aug 30, 2026
m*r*i*i*a*d.com F Aug 30, 2026
e*s*m*l*c*l*u*a*.com (WP 7.1) F Aug 30, 2026
s*e*m*e*r*i*g*t*t*o*.com (WP 7.1) F Aug 30, 2026
m*r*h*r*i*c*.com F Aug 30, 2026
c*o*b*h*l*s*l*s*o*a*e.com F Aug 30, 2026
c*o*b*h*l*m*n*s*o*a*e.com F Aug 30, 2026
b*t*o*v*r*e*.com F Aug 30, 2026
j*r*m*e*v*l*e*.fr F Aug 30, 2026