WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: wp-xhelpers (Used by 10 domains)

Security snapshot

Across 10 wp-xhelpers WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Security metrics currently cover 9 matching records in the cached metrics snapshot.

Grade A 0% Grade B 0% Grade C 0% Grade D 0% Grade F 100%
Fail the header check (F)100%vs 82.5% avg
Leak usernames33%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS100%vs 96.2% avg

What stands out

TLDWP currently associates 10 indexed WordPress sites with wp-xhelpers, equivalent to 0% of the current WordPress dataset.

The largest measured difference is header-grade F: 100% versus 82.5% overall (+17.5 percentage points).

Username enumeration is 33.3% vs 38.5% overall (-5.2 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).

These are observational associations among sites where TLDWP detected wp-xhelpers, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Domain Exposures Headers Last Checked
v*t*g*t*.com (WP 6.7.4) F Sep 5, 2026
j*s*s*a*b.com F Aug 28, 2026
p*r*o*a*f*l*i*l.com F Aug 20, 2026
n*u*t*.com (WP 6.2.9) F Aug 2, 2026
m*h*i*s*a*f.com F Aug 1, 2026
l*v*s*o*e.com (WP 7.0.2) F Jul 30, 2026
s*f*i*u.com F Jul 23, 2026
h*y*r*i*.com (WP 7.0.2) F Jul 21, 2026
g*t*i*.com F Jul 19, 2026