WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: wp-private-message (Used by 688 domains)

Security snapshot

Across 688 wp-private-message WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 1% Grade B 2% Grade C 2% Grade D 8% Grade F 87%
Fail the header check (F)87%vs 82.5% avg
Leak usernames33%vs 38.5% avg
Expose a sensitive file3%vs 1.8% avg
Use HTTPS95%vs 96.2% avg

What stands out

TLDWP currently associates 688 indexed WordPress sites with wp-private-message, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 33% versus 38.5% overall (-5.5 percentage points).

Header-grade F is 87.4% vs 82.5% overall (+4.9 pp); Sensitive-file exposure is 3% vs 1.8% overall (+1.2 pp); HTTPS adoption is 95.1% vs 96.2% overall (-1.1 pp).

These are observational associations among sites where TLDWP detected wp-private-message, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Infrastructure patterns

Infrastructure detected alongside wp-private-message. Percentages are within sites where that specific signal was detectable; the baseline compares the same signal across detected WordPress sites overall.

Co-occurrence describes technologies observed on the same sites. Detection coverage varies by signal, and an association does not imply that one technology caused or selected another.

wp-private-message Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
h*m*e*.c*m.br (WP 6.7.7) F Sep 9, 2026
r*g*t*o*e*h*i*a*d.com (WP 6.9.4) F Sep 9, 2026
m*e*t*e.com (WP 7.1) F Sep 9, 2026
f*a*r*c*u*t.com (WP 7.1) F Sep 9, 2026
f*a*r*a*e*t*t*.com (WP 7.1) F Sep 9, 2026
f*r*l*f*b*z*r.com (WP 7.1) F Sep 9, 2026
y*l*o*-*a*.com (WP 7.1) F Sep 9, 2026
y*l*a*a.com (WP 7.0.2) D Sep 9, 2026
m*d*t*r*n*.com (WP 7.1) F Sep 8, 2026
d*a*m*o.com (WP 7.1) F Sep 8, 2026
r*c*h*m*s*r*a*e*t*t*.com (WP 7.0.2) Sep 8, 2026
h*p*-*r*d*e.kr F Sep 8, 2026
m*d*c*l*o*r*s*t*.com (WP 6.9) F Sep 8, 2026
f*n*b*b*.com F Sep 8, 2026
r*a*a*m*r*c.com (WP 7.1) F Sep 8, 2026
d*v*d*r*u*t*m*o*i*i*r.com (WP 7.1) F Sep 8, 2026
a*b*d*y*.qa (WP 6.7.2) F Sep 8, 2026
m*c*j*b.com (WP 7.1) F Sep 8, 2026
w*r*a*i*.com (WP 6.8.8) D Sep 8, 2026
o*a*b*o*.com (WP 7.1) F Sep 8, 2026
k*r*l*e*u*i*a.com (WP 7.1) F Sep 8, 2026
r*v*d*g*t*l*y.com (WP 7.1) F Sep 8, 2026
k*r*y*r*k*c.com (WP 7.1) F Sep 7, 2026
t*s*m*.de (WP 7.1) F Sep 7, 2026
i*e*i*v*s*o*.net (WP 6.8.8) F Sep 7, 2026
w*i*e*o*k*o*e*l*m*t*d.com (WP 7.1) F Sep 7, 2026
w*e*i*b*u*e*.com F Sep 7, 2026
d*r*r*t*i*.com (WP 7.1) F Sep 7, 2026
s*l*k*n*.com (WP 7.1) F Sep 7, 2026
j*b*f*e*.vip F Sep 7, 2026
d*s*i*y*o*.com (WP 7.1) F Sep 7, 2026
l*r*n*o*i*i*r*a.es (WP 6.9.7) F Sep 7, 2026
m*o*o*o*.com (WP 7.1) F Sep 7, 2026
a*e*o*s.com (WP 6.8.2) F Sep 6, 2026
a*e*a*u*u*y*a*s.com (WP 6.8.3) F Sep 6, 2026
e*i*i*i*i*.com (WP 7.1) F Sep 6, 2026
a*e*o*k*o*t.com (WP 7.1) F Sep 6, 2026
o*d*o*r*n.ir (WP 7.1) F Sep 6, 2026
t*i*s*e*e*l*s*a*e.com (WP 7.1) F Sep 6, 2026
e*h*a*t*c*r*v*n*u*e*.com (WP 7.0.4) F Sep 6, 2026
s*h*o*a*-*o*s*l*i*g.com (WP 7.1) F Sep 6, 2026
e*i*i*i*m*.com (WP 7.1) F Sep 6, 2026
e*i*e*a*e*t.africa (WP 7.1) A Sep 6, 2026
v*l*d*r*h*.com (WP 6.1.7) F Sep 6, 2026
r*p*h*r*n*.com F Sep 6, 2026
v*e*l*m*t*.com (WP 6.9.7) F Sep 6, 2026
s*c*a*t*e*t.com F Sep 6, 2026
e*d*s*a*y.com (WP 6.8.8) F Sep 6, 2026
m*x*m*.com (WP 5.7.15) F Sep 5, 2026
v*r*e*o*e*t.com (WP 7.1) F Sep 5, 2026
b*o*i*g*o*.com (WP 6.7.2) F Sep 5, 2026
a*c*a*s*l*s.com F Sep 5, 2026
r*e*e*p*r*a*e*c*.com (WP 7.1) F Sep 5, 2026
d*l*l*r*.com (WP 7.1) F Sep 5, 2026
d*n*a*o*f*c*n*t*o*k.com (WP 7.1) F Sep 5, 2026
k*i*o*a*t*s*n.com (WP 7.1) F Sep 5, 2026
h*l*e*j*b*.com (WP 7.1) F Sep 5, 2026
d*n*a*-*a*a*.com (WP 7.0.4) F Sep 5, 2026
e*r*j*b*e*v*c*s.com (WP 7.1) F Sep 5, 2026
j*c*s*n*o*e.c*m.au (WP 7.1) F Sep 4, 2026
r*r*l*n*e*p*i*e*.c*m.au (WP 6.8.8) F Sep 4, 2026
c*d*s*r*c*l*u*a*.c*m.br (WP 5.7.17) F Sep 4, 2026
h*a*t*f*o*d*i*c.com (WP 6.9) F Sep 4, 2026
a*p*i*r*t*l*c.com (WP 7.1) F Sep 4, 2026
r*l*c*o*s*l*a*c*s*r*i*e*.com (WP 7.1) D Sep 4, 2026
n*b*a*b*z.com (WP 7.1) F Sep 4, 2026
l*n*i*l*n*j*b*.org F Sep 4, 2026
e*e*n*l*c*t*-*o*r*.com F Sep 4, 2026
t*a*s*o*t*s*a*i*a.com (WP 7.1) F Sep 4, 2026
a*l*k*m*r*n.com (WP 7.0.4) F Sep 4, 2026
a*l*k*a*z*n.com (WP 6.8.8) F Sep 4, 2026
a*l*k*a*o*s*r.com (WP 6.8.8) F Sep 4, 2026
s*u*e*t*n*g*t.de (WP 7.1) F Sep 4, 2026
t*a*s*o*t*r*v*l*t*o*.com (WP 7.1) F Sep 4, 2026
y*c*t*d*b*i*e*l*.com (WP 7.1) F Sep 4, 2026
g*y*m*g.com (WP 7.1) F Sep 4, 2026
z*n*f*.com (WP 6.6.2) F Sep 4, 2026
t*i*o*y*s*r*w.com D Sep 3, 2026
x*e*t*4*o*p*t*l*t*.com (WP 6.8.8) F Sep 3, 2026
x*e*t*4.com (WP 6.7.7) F Sep 3, 2026
d*l*g*n*e*o*k*o*c*.com (WP 7.1) F Sep 3, 2026
j*b*0.c*.uk (WP 7.1) F Sep 3, 2026
a*a*h.com (WP 7.1) F Sep 3, 2026
j*r*-*i*k.com (WP 7.1) F Sep 3, 2026
b*u*d*s*r*p*r*y*a*a*e*e*t.com (WP 7.1) F Sep 3, 2026
h*d*r*p*r*y.com (WP 6.8.8) F Sep 3, 2026
r*a*a*t*d*r.com (WP 5.8.2) F Sep 3, 2026
e*l*e*t.com (WP 7.0.4) F Sep 3, 2026
r*e*t*f*i*g.com (WP 7.1) F Sep 3, 2026
r*o*a*a*s*m*l.com (WP 7.1) D Sep 2, 2026
x*-*k*r*c*r*-*k*c.com (WP 7.1) D Sep 2, 2026
d*j*v*r*a*e*t*t*.com (WP 6.1.12) F Sep 2, 2026
b*o*i*l*c*t*o*.com (WP 7.1) F Sep 2, 2026
b*o*s*m*p.com B Sep 2, 2026
r*y*s*a*f*n*.com (WP 7.1) F Sep 2, 2026
m*r*d*a*e*s*i*.com (WP 7.1) F Sep 2, 2026
t*s*p*e*c*n*e*t.com (WP 7.1) C Sep 2, 2026
r*w*b*g*r*e*.com (WP 6.6.7) F Sep 2, 2026
j*b*j*b*.com (WP 7.1) F Sep 2, 2026
b*o*s*u*.com (WP 7.1) D Sep 2, 2026