WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: wp-rocket_off (Used by 11 domains)

Security snapshot

Across 11 wp-rocket_off WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 9% Grade B 0% Grade C 0% Grade D 0% Grade F 91%
Fail the header check (F)91%vs 82.5% avg
Leak usernames64%vs 38.5% avg
Expose a sensitive file27.3%vs 1.8% avg
Use HTTPS100%vs 96.2% avg

What stands out

TLDWP currently associates 11 indexed WordPress sites with wp-rocket_off, equivalent to 0% of the current WordPress dataset.

The largest measured difference is sensitive-file exposure: 27.3% versus 1.8% overall (+25.5 percentage points).

Username enumeration is 63.6% vs 38.5% overall (+25.1 pp); Header-grade F is 90.9% vs 82.5% overall (+8.4 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp).

These are observational associations among sites where TLDWP detected wp-rocket_off, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

wp-rocket_off Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
p*f*i*s*i*c*e*.net (WP 7.1) F Aug 28, 2026
s*i*t*o*t*.com (WP 6.3.8) A Aug 26, 2026
r*-*h*p.fr F Aug 26, 2026
a*t*d*a*s*n*o.com (WP 6.9.7) F Aug 20, 2026
s*o*d*p.com F Aug 19, 2026
p*r*d*g*b*.com (WP 7.0.4) F Aug 17, 2026
s*h*y*e*g*i*h.com F Aug 16, 2026
p*o*a*i*i*t*r*o*s.com F Aug 6, 2026
m*l*d*o*.com F Jul 31, 2026
b*e*k*y.io (WP 7.0.2) F Jul 26, 2026
t*o*e*s*a*k*t.com F Jul 20, 2026