WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: wp-rocket-plugin (Used by 9 domains)

Security snapshot

Across 9 wp-rocket-plugin WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 0% Grade C 0% Grade D 0% Grade F 100%
Fail the header check (F)100%vs 82.5% avg
Leak usernames56%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS100%vs 96.2% avg

What stands out

TLDWP currently associates 9 indexed WordPress sites with wp-rocket-plugin, equivalent to 0% of the current WordPress dataset.

The largest measured difference is header-grade F: 100% versus 82.5% overall (+17.5 percentage points).

Username enumeration is 55.6% vs 38.5% overall (+17.1 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).

These are observational associations among sites where TLDWP detected wp-rocket-plugin, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

wp-rocket-plugin Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
r*t*7*a*k.com (WP 7.1) F Sep 2, 2026
y*p*o*.org F Sep 1, 2026
y*p*o*a*p.com (WP 7.1) F Aug 31, 2026
t*p*t*e*m*d.com (WP 7.1) F Aug 29, 2026
g*o*a*g*.com (WP 7.1) F Aug 25, 2026
p*p*s*u*t*e*m.com (WP 7.0.4) F Aug 16, 2026
s*n*a*s*r*a*a*k.com (WP 7.0.4) F Aug 15, 2026
s*r*a*e*s*t.com (WP 7.0.2) F Jul 25, 2026
b*f*s*r*a*s*p*.com (WP 7.0.2) F Jul 21, 2026