WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: xeco-core (Used by 17 domains)

Security snapshot

Across 17 xeco-core WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 0% Grade C 0% Grade D 12% Grade F 88%
Fail the header check (F)88%vs 82.5% avg
Leak usernames53%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS94%vs 96.2% avg

What stands out

TLDWP currently associates 17 indexed WordPress sites with xeco-core, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 52.9% versus 38.5% overall (+14.4 percentage points).

Header-grade F is 88.2% vs 82.5% overall (+5.7 pp); HTTPS adoption is 94.1% vs 96.2% overall (-2.1 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).

These are observational associations among sites where TLDWP detected xeco-core, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

xeco-core Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
e*p*r*-*m*.fr (WP 7.1) F Sep 1, 2026
e*u*l*f*n*n*e.com (WP 7.0.4) F Aug 31, 2026
e*u*l*c*a*n.com (WP 6.7.7) F Aug 31, 2026
c*r*e*t*a*i*g*o*p*n*.com (WP 7.1) F Aug 31, 2026
c*y*t*n*t*o*k*p*c*.com (WP 7.1) F Aug 31, 2026
6*o*h*i*.com (WP 7.1) F Aug 27, 2026
c*k*i*.com (WP 7.1) F Aug 23, 2026
t*i*d*p*c*r*m.com D Aug 23, 2026
m*n*t*e*s.com (WP 7.1) F Aug 22, 2026
s*p*e*e*o*m*r*e*r*i*i*g.com F Aug 21, 2026
s*p*e*e*o*m*r*e*o*r*e*.com F Aug 21, 2026
u*t*y*r*n*e*o*t*j.com (WP 6.6.7) D Aug 16, 2026
i*a*u*w*b.com (WP 7.0.4) F Aug 15, 2026
c*d*b*a*n*e*t.com (WP 6.9.5) F Jul 24, 2026
k*k*i*v*s.com (WP 7.0.2) F Jul 19, 2026
f*l*o*-*m.com (WP 7.0.2) F Jul 19, 2026
a*y*e*t.com F Jul 18, 2026