Security snapshot
Across 81,685 wp-smushit WordPress sites indexed by TLDWP, compared to the all-WordPress average.
Grade A 2%
Grade B 2%
Grade C 3%
Grade D 9%
Grade F 85%
Fail the header check (F)85%vs 84.2% avg
Leak usernames42%vs 45.1% avg
Expose a sensitive file2.3%vs 1.8% avg
Use HTTPS98%vs 97.3% avg
What stands out
TLDWP currently associates 81,685 indexed WordPress sites with wp-smushit, equivalent to 1.1% of the current WordPress dataset.
The largest measured difference is username enumeration: 42.3% versus 45.1% overall (-2.8 percentage points).
HTTPS adoption is 98.3% vs 97.3% overall (+1 pp); Header-grade F is 84.7% vs 84.2% overall (+0.5 pp); Sensitive-file exposure is 2.3% vs 1.8% overall (+0.5 pp).
These are observational associations among sites where TLDWP detected wp-smushit, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
Infrastructure patterns
Infrastructure detected alongside wp-smushit. Percentages are within sites where that specific signal was detectable; the baseline compares the same signal across detected WordPress sites overall.
PHP versions
10,956 detected · 13.4% coverage
Web servers
59,951 detected · 73.1% coverage
CDNs / WAFs
16,488 detected · 20.1% coverage
Hosting networks
60,625 detected · 73.9% coverage
Co-occurrence describes technologies observed on the same sites. Detection coverage varies by signal, and an association does not imply that one technology caused or selected another.
Smush
Compress images, optimize images, and enable image lazy load automatically to keep your WordPress site fast, without losing quality. Smush makes it easy to optimize images, compress images, and deliver images faster across your entire WordPress site. Automatically reduce image file sizes, enable image lazy load, and serve modern formats like WebP and AVIF, all without breaking image quality or adding extra work.…
| Domain | Version | Exposures | Headers | Last Checked |
|---|---|---|---|---|
| **************.dk (WP 7.1.2) | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| ************************.com | 4.3.4· 60% conf. | B | Oct 13, 2026 | |
| ************.com (WP 7.1.3) | 4.3.4· 60% conf. | — | C | Oct 13, 2026 |
| **********.fr (WP 7.1.3) | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| ************.com (WP 7.1.3) | 4.3.4· 60% conf. | — | C | Oct 13, 2026 |
| ***************.fr (WP 7.1.3) | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| *********.fr | 3.8.7· 60% conf.HIGH5 vulnerability matches | F | Oct 13, 2026 | |
| ******.org (WP 7.1.3) | 4.3.2· 60% conf. | F | Oct 13, 2026 | |
| ****.cz (WP 6.7) | 3.9.4· 60% conf.HIGH5 vulnerability matches | D | Oct 13, 2026 | |
| **********.com (WP 7.1.3) | 4.3.4· 60% conf. | — | F | Oct 13, 2026 |
| ***********.com (WP 7.1.3) | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| ************.com (WP 7.1.3) | 4.3.3· 60% conf. | F | Oct 13, 2026 | |
| ***********.com (WP 7.1.3) | 3.14.2· 60% conf.HIGH4 vulnerability matches | F | Oct 13, 2026 | |
| ************************.com (WP 7.1.3) | 4.3.2· 60% conf. | F | Oct 13, 2026 | |
| *************.org (WP 5.7.1) | 3.8.3· 60% conf.HIGH5 vulnerability matches | F | Oct 13, 2026 | |
| **************.com (WP 7.1.3) | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| ********.org | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| ****.org (WP 7.1.3) | 3.16.2· 60% conf.HIGH4 vulnerability matches | F | Oct 13, 2026 | |
| *******.us (WP 7.1.3) | 3.24.0· 60% conf.HIGH2 vulnerability matches | F | Oct 13, 2026 | |
| **************.fr | — | — | A | Oct 13, 2026 |
| **********.org (WP 7.1.3) | 4.3.4· 60% conf. | — | F | Oct 13, 2026 |
| *****.org | — | F | Oct 13, 2026 | |
| **********.org (WP 7.1.2) | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| ****************.com (WP 5.4.24) | 3.6.3· 60% conf.HIGH5 vulnerability matches | F | Oct 13, 2026 | |
| ********.es (WP 7.1.3) | 3.16.6· 60% conf.HIGH3 vulnerability matches | B | Oct 13, 2026 | |
| ****************************.org (WP 7.1.3) | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| ***************.com (WP 7.1.1) | 4.3.3· 60% conf. | C | Oct 13, 2026 | |
| ************.ro (WP 7.1.3) | 4.3.4· 60% conf. | D | Oct 13, 2026 | |
| *************.com (WP 7.0.7) | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| ***************.com (WP 7.1.2) | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| ***************.com (WP 6.9) | 4.3.2· 60% conf. | F | Oct 13, 2026 | |
| ***********************.nl | 4.3.4· 60% conf. | — | F | Oct 13, 2026 |
| ******************.fr (WP 7.1.3) | 4.1.2· 60% conf.HIGH2 vulnerability matches | F | Oct 13, 2026 | |
| **********.org | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| **********************.com (WP 7.1.3) | 3.18.1· 60% conf.HIGH2 vulnerability matches | F | Oct 13, 2026 | |
| **********.institute (WP 7.0.7) | 4.3.2· 60% conf. | F | Oct 13, 2026 | |
| *******************.be (WP 6.8.3) | 3.20.0· 60% conf.HIGH2 vulnerability matches | F | Oct 13, 2026 | |
| *****************.be (WP 7.1) | 3.16.6· 60% conf.HIGH3 vulnerability matches | F | Oct 13, 2026 | |
| *********************.nl (WP 7.1.2) | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| ***********.nl (WP 6.8.7) | 4.2.0· 60% conf.HIGH2 vulnerability matches | F | Oct 13, 2026 | |
| *********.com (WP 7.0.4) | 4.3.0· 60% conf.HIGH1 vulnerability match | F | Oct 13, 2026 | |
| **********.com | 3.17.1· 60% conf.HIGH2 vulnerability matches | F | Oct 13, 2026 | |
| *************.com (WP 7.1.3) | 4.3.4· 60% conf. | — | F | Oct 13, 2026 |
| *********.com (WP 7.1.3) | 4.3.4· 60% conf. | — | F | Oct 13, 2026 |
| *********.net | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| ***************.com (WP 7.1.3) | 3.20.0· 60% conf.HIGH2 vulnerability matches | F | Oct 13, 2026 | |
| *****************.ro (WP 6.5.13) | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| ********.io | 3.18.0· 60% conf.HIGH2 vulnerability matches | F | Oct 13, 2026 | |
| ****************.com (WP 7.1.3) | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| ****************.com (WP 7.1.3) | 4.3.3· 60% conf. | F | Oct 13, 2026 | |
| ***********.com (WP 6.3.1) | 3.11.1· 60% conf.HIGH4 vulnerability matches | F | Oct 13, 2026 | |
| ************************************.it (WP 7.1.3) | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| *********************.com (WP 7.1.3) | 4.1.0· 60% conf.HIGH2 vulnerability matches | F | Oct 13, 2026 | |
| **********************.com (WP 7.1.3) | 4.3.4· 60% conf. | — | F | Oct 13, 2026 |
| ******************.com | — | F | Oct 13, 2026 | |
| *****.com (WP 7.1.3) | 4.3.4· 60% conf. | — | F | Oct 13, 2026 |
| ************************.com (WP 6.4.13) | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| ******.com (WP 7.1.3) | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| ********.es | 4.3.3· 60% conf. | — | D | Oct 13, 2026 |
| **********************.com | 4.3.4· 60% conf. | C | Oct 13, 2026 | |
| *************.com (WP 7.1.3) | 4.3.4· 60% conf. | — | F | Oct 13, 2026 |
| ****.es | 3.16.4· 60% conf.HIGH4 vulnerability matches | F | Oct 13, 2026 | |
| *****************.com | 3.21.1· 60% conf.HIGH2 vulnerability matches | F | Oct 13, 2026 | |
| ***********.de (WP 7.1.3) | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| *******.com (WP 7.1) | — | — | Oct 13, 2026 | |
| *************.com (WP 7.1.3) | — | — | D | Oct 13, 2026 |
| *************.com (WP 7.1.3) | 3.23.1· 60% conf.HIGH2 vulnerability matches | F | Oct 13, 2026 | |
| *****************.com (WP 6.9.10) | 3.24.0· 60% conf.HIGH2 vulnerability matches | F | Oct 13, 2026 | |
| **************.co.uk (WP 7.1.3) | 4.0.3· 60% conf.HIGH2 vulnerability matches | F | Oct 13, 2026 | |
| ******************.com | 4.3.4· 60% conf. | — | F | Oct 13, 2026 |
| ******************.com (WP 7.1.3) | 4.2.0· 60% conf.HIGH2 vulnerability matches | F | Oct 13, 2026 | |
| ***********.com | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| ***********************.com (WP 7.1.3) | 4.3.4· 60% conf. | — | F | Oct 13, 2026 |
| ************.gr (WP 7.1.3) | 4.3.4· 60% conf. | C | Oct 13, 2026 | |
| ********************.com (WP 7.1.3) | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| *************.com | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| ***********.co.th | 4.3.0· 60% conf.HIGH1 vulnerability match | F | Oct 13, 2026 | |
| ****************.com | 4.2.0· 60% conf.HIGH2 vulnerability matches | F | Oct 13, 2026 | |
| **************.com | — | F | Oct 13, 2026 | |
| ************************.com (WP 7.1.3) | 3.16.6· 60% conf.HIGH3 vulnerability matches | F | Oct 13, 2026 | |
| ****************.com (WP 7.0.7) | 4.2.0· 60% conf.HIGH2 vulnerability matches | F | Oct 13, 2026 | |
| **********.nl | 4.3.4· 60% conf. | — | F | Oct 13, 2026 |
| **************.org | 4.3.0· 60% conf.HIGH1 vulnerability match | F | Oct 13, 2026 | |
| *********.org | 3.24.0· 60% conf.HIGH2 vulnerability matches | F | Oct 13, 2026 | |
| **********.com (WP 7.1.3) | 4.3.3· 60% conf. | F | Oct 13, 2026 | |
| **************.de (WP 7.1.3) | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| ************.be (WP 6.3.2) | 3.14.2· 60% conf.HIGH4 vulnerability matches | F | Oct 13, 2026 | |
| ********.com (WP 6.6.4) | — | F | Oct 13, 2026 | |
| ***********************.com | 3.16.5· 60% conf.HIGH3 vulnerability matches | F | Oct 13, 2026 | |
| ******.es | — | F | Oct 13, 2026 | |
| ******.pl (WP 6.6.10) | 3.24.0· 60% conf.HIGH2 vulnerability matches | F | Oct 13, 2026 | |
| *************.com (WP 5.9) | 3.9.5· 60% conf.HIGH5 vulnerability matches | F | Oct 13, 2026 | |
| **************.com (WP 7.1.3) | 4.3.0· 60% conf.HIGH1 vulnerability match | F | Oct 13, 2026 | |
| ***********************.com (WP 7.1.3) | 4.3.0· 60% conf.HIGH1 vulnerability match | F | Oct 13, 2026 | |
| *********************.com (WP 6.9.10) | 4.3.4· 60% conf. | F | Oct 13, 2026 | |
| ******************.fr | 3.23.1· 60% conf.HIGH2 vulnerability matches | F | Oct 13, 2026 | |
| **************.com (WP 7.1.3) | 4.3.0· 60% conf.HIGH1 vulnerability match | F | Oct 13, 2026 | |
| ************.org.pl (WP 6.4.13) | 4.3.3· 60% conf. | F | Oct 13, 2026 | |
| **********.com (WP 5.4.24) | 3.6.3· 60% conf.HIGH5 vulnerability matches | F | Oct 13, 2026 | |
| *********.sk | 4.3.4· 60% conf. | F | Oct 13, 2026 |
Page 1 of 817
Next »