Security snapshot
Across 13 wp-headmaster WordPress sites indexed by TLDWP, compared to the all-WordPress average.
What stands out
TLDWP currently associates 13 indexed WordPress sites with wp-headmaster, equivalent to 0% of the current WordPress dataset.
The largest measured difference is header-grade F: 92.3% versus 82.5% overall (+9.8 percentage points).
Username enumeration is 30.8% vs 38.5% overall (-7.7 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).
These are observational associations among sites where TLDWP detected wp-headmaster, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
WP Headmaster
WP Headmaster is a free plugin to help correctly include, organise and enqueue common items into your theme’s head tag. WP Headmaster has been designed to work perfectly alongside other popular plugins like Yoast’s WordPress SEO, without any cross-over. WP Headmaster will continue to develop, but at present comes with the following features: Google Analytics – Simply add in your unique tracking ID and select from either Universal or Classic tracking. The GA tracking code will be added last within the head. Page/…
| Domain | Version | Exposures | Headers | Last Checked |
|---|---|---|---|---|
| c*s*l*c*l.c*.uk (WP 5.3.23) | — | F | Sep 8, 2026 | |
| c*r*i*g*s*f*a*b*i*g*.c*.uk | — | F | Sep 5, 2026 | |
| l*c*s*i*h*e*b*.com | — | F | Aug 30, 2026 | |
| g*e*d*e*m*o*k*p*o*.com | — | F | Aug 25, 2026 | |
| g*l*a*l*n*n*.com | — | F | Aug 23, 2026 | |
| p*r*s*s*o*y*t*a*f*r*c*l*e*t*n.com | — | F | Aug 17, 2026 | |
| c*r*i*g*s*e*r*o*s.c*.uk | — | F | Aug 6, 2026 | |
| m*s*e*r*n*e*s.o*g.uk | — | F | Aug 3, 2026 | |
| b*s*e*e*t*i*a*s*r*i*e*.c*.uk | — | F | Aug 2, 2026 | |
| h*s*o*y*f*t*e*a*e.c*.uk | — | F | Aug 2, 2026 | |
| a*t*s*a*e*-*a*v*g*.com | — | D | Jul 31, 2026 | |
| c*o*n*i*t*e*k*.org | — | F | Jul 26, 2026 | |
| s*e*d*f*x*n*s.com (WP 6.8.6) | — | F | Jul 19, 2026 |