WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: wp_toolkit-master (Used by 14 domains)

Security snapshot

Across 14 wp_toolkit-master WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Security metrics currently cover 13 matching records in the cached metrics snapshot.

Grade A 0% Grade B 0% Grade C 0% Grade D 0% Grade F 100%
Fail the header check (F)100%vs 82.5% avg
Leak usernames38%vs 38.5% avg
Expose a sensitive file7.7%vs 1.8% avg
Use HTTPS92%vs 96.2% avg

What stands out

TLDWP currently associates 14 indexed WordPress sites with wp_toolkit-master, equivalent to 0% of the current WordPress dataset.

The largest measured difference is header-grade F: 100% versus 82.5% overall (+17.5 percentage points).

Sensitive-file exposure is 7.7% vs 1.8% overall (+5.9 pp); HTTPS adoption is 92.3% vs 96.2% overall (-3.9 pp); Username enumeration is 38.5% vs 38.5% overall (0 pp).

These are observational associations among sites where TLDWP detected wp_toolkit-master, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

wp_toolkit-master Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
d*a*a*h*n*.com (WP 6.9.7) F Sep 8, 2026
e*t*a*.gr (WP 6.8.8) F Sep 6, 2026
h*l*e*i*f*o*s*r*i*e.com F Sep 5, 2026
m*l.gr F Aug 20, 2026
n*m*a*h*l*e*i*.gr F Aug 16, 2026
x*n*h*s.gr (WP 6.9.7) F Aug 13, 2026
r*g*n.gr (WP 6.6.5) F Aug 4, 2026
i*a*i*i*i*.com (WP 6.7.5) F Jul 27, 2026
s*f*b*l*e*s.cy (WP 7.0.2) F Jul 24, 2026
k*s*i*a*i*.gr F Jul 22, 2026
a*i*t*n*v*a*i*n.com F Jul 22, 2026
k*f*m.org (WP 6.9.5) F Jul 20, 2026
e*v*d*f*o*s.gr F Jul 18, 2026