WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: x-forms-express (Used by 5 domains)

Security snapshot

Across 5 x-forms-express WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 0% Grade C 0% Grade D 0% Grade F 100%
Fail the header check (F)100%vs 82.5% avg
Leak usernames60%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS100%vs 96.2% avg

What stands out

TLDWP currently associates 5 indexed WordPress sites with x-forms-express, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 60% versus 38.5% overall (+21.5 percentage points).

Header-grade F is 100% vs 82.5% overall (+17.5 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).

These are observational associations among sites where TLDWP detected x-forms-express, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

x-forms-express Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
e*a*u*t*o*f*n*i*g.com (WP 4.3.34) F Sep 5, 2026
s*y*a*e*e*t*e*t*r.com F Sep 2, 2026
m*l*l*f*o*e*s.com (WP 4.3.34) F Jul 31, 2026
s*r*i*s*a*r*e*s.com (WP 3.8.41) F Jul 25, 2026
a*r*n*t*r*.com (WP 4.1.42) F Jul 25, 2026