WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: xtender (Used by 676 domains)

Security snapshot

Across 676 xtender WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 1% Grade C 2% Grade D 5% Grade F 92%
Fail the header check (F)92%vs 82.5% avg
Leak usernames44%vs 38.5% avg
Expose a sensitive file3.2%vs 1.8% avg
Use HTTPS96%vs 96.2% avg

What stands out

TLDWP currently associates 676 indexed WordPress sites with xtender, equivalent to 0% of the current WordPress dataset.

The largest measured difference is header-grade F: 92% versus 82.5% overall (+9.5 percentage points).

Username enumeration is 43.6% vs 38.5% overall (+5.1 pp); Sensitive-file exposure is 3.2% vs 1.8% overall (+1.4 pp); HTTPS adoption is 96% vs 96.2% overall (-0.2 pp).

These are observational associations among sites where TLDWP detected xtender, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

xtender Premium / Custom

This plugin is not available on WordPress.org. It may be a premium plugin, a custom plugin, or a plugin from a third-party marketplace.

Domain Exposures Headers Last Checked
m*r*m*a*o*c*n*.it F Sep 8, 2026
m*d*a*e*e*e*g*e*i*d*r.com (WP 6.3.5) F Sep 8, 2026
a*n*e*e*i*.com (WP 7.1) F Sep 8, 2026
a*n*e*b*r*l.com (WP 7.1) F Sep 8, 2026
r*z*v*.com (WP 6.9.7) F Sep 8, 2026
m*c*e*.com (WP 6.9.7) F Sep 8, 2026
s*i*s*a*i*i*m.nl F Sep 8, 2026
e*a*r*h*r*e*s.c*.ke F Sep 7, 2026
a*i*e*e*o*t.com F Sep 7, 2026
d*t*v*a*e*e.com (WP 7.1) F Sep 7, 2026
o*e*i*m*m*n*n*o.com (WP 6.3.1) F Sep 7, 2026
o*e*-*u*r*a*h*v.com (WP 7.1) F Sep 7, 2026
e*e*g*e*n*a*l*o*m.com (WP 7.1) F Sep 7, 2026
p*r*o*a*u*.ua (WP 7.1) F Sep 7, 2026
s*l*d*o*k*a*c*t*.com (WP 7.1) B Sep 7, 2026
o*d*o*k*i*l*d*n*a*.com (WP 5.8.14) C Sep 7, 2026
y*s*e*i*n*e*i*o*.com (WP 6.0.14) F Sep 7, 2026
o*a*g*e*h*l.com (WP 6.0.14) F Sep 7, 2026
k*n*e*-*a*l*t*.com D Sep 7, 2026
s*h*o*s*r*e*p*a*h*u*e.com F Sep 7, 2026
r*s*a*r*n*k*r*o.com (WP 6.9.7) F Sep 6, 2026
l*n*b*a*h*r*a*i*e*r*u*.org F Sep 6, 2026
r*j*o.hu (WP 4.9.31) F Sep 6, 2026
y*r*s*a*l*t.com (WP 7.0.4) F Sep 6, 2026
s*f*-*r*n*e*i*.com (WP 5.7.17) F Sep 6, 2026
d*r*a*o*o*i*-*r*a*.com (WP 5.3.23) F Sep 6, 2026
r*g*l*e*s.com (WP 5.3.23) F Sep 6, 2026
d*n*e*x*r*s*m*n*a*o.com (WP 6.6.7) F Sep 6, 2026
d*n*e*m*.com (WP 7.1) F Sep 6, 2026
d*n*e*o*h*t*e.com (WP 7.1) F Sep 6, 2026
m*x*m*l*a*o*e*l.com (WP 6.9.7) F Sep 6, 2026
m*x*e*s*n*e*g.com (WP 7.1) F Sep 5, 2026
r*n*c*t*a*e*i*c*e.com F Sep 5, 2026
d*n*a*l*p*z.com (WP 6.6.7) F Sep 5, 2026
y*a*-*c*l*t*u*.com (WP 6.6.7) F Sep 5, 2026
d*n*a*b*n*s.com (WP 7.0) F Sep 5, 2026
d*n*i*m*t*e*s*n*r*.com F Sep 5, 2026
d*n*i*m*t*e*s*n.com F Sep 5, 2026
v*l*n*i*a*t*d*e*.com (WP 7.1) F Sep 5, 2026
d*n*s*n*w*l*.com (WP 6.1.12) F Sep 5, 2026
e*a*r*h*r*e*s.com F Sep 5, 2026
d*y*u*r*k.com (WP 6.0.12) F Sep 5, 2026
d*r*j*t.com (WP 7.0) F Sep 5, 2026
k*d*r*f*m*l*h*u*e*.com (WP 6.8.3) F Sep 5, 2026
y*n*o*t*m*o*a*y.com F Sep 5, 2026
y*n*a*l*t*c*d*m*.com (WP 6.2.11) F Sep 5, 2026
d*y*x*l*.com (WP 7.1) F Sep 5, 2026
n*m*e*1*e*t*s*.com (WP 7.1) F Sep 5, 2026
k*b*r*c*u*t*y*l*b.com (WP 6.9.7) D Sep 4, 2026
d*n*s*r*l*n*c*.com (WP 7.1) F Sep 4, 2026
e*i*e*s*n*t*e*k*z*.com (WP 7.0) F Sep 4, 2026
n*b*n*.com (WP 5.7) F Sep 4, 2026
r*l*a*l*t*a*e*s*l*t*o*s.com (WP 6.5.7) F Sep 4, 2026
s*i*a*i*t*o*.com (WP 7.1) F Sep 4, 2026
t*a*w*r*s*o*.com (WP 7.1) F Sep 4, 2026
y*g*i*a*i*d*.com (WP 4.9.26) F Sep 4, 2026
t*w*e*f*e*h*v*n.com F Sep 4, 2026
p*o*a*n*.pl (WP 7.1) F Sep 4, 2026
r*i*e*h*e*s*r*m*s*c.com F Sep 4, 2026
r*i*e*h*e*s*r*a*t.com F Sep 4, 2026
x*n*r*g*l*e*y.com (WP 7.1) F Sep 4, 2026
h*a*i*g*i*h*n*r*.com F Sep 3, 2026
h*a*i*g*n*r*.com F Sep 3, 2026
c*c*e*r*e*e.com (WP 7.1) F Sep 3, 2026
s*a*t*r*i*c*a*t.com (WP 7.1) F Sep 3, 2026
n*w*t*r*k*2*.com (WP 4.9.26) F Sep 3, 2026
e*p*i*v*t.com (WP 6.8.3) F Sep 3, 2026
i*l*o*s*y*g*e*t*o*s*.c*.uk (WP 6.9.7) F Sep 3, 2026
t*n*o*f*a*k*u*t.de (WP 7.0.4) F Sep 3, 2026
e*p*c*-*.com (WP 7.0.4) F Sep 3, 2026
o*h*n*v*r*l*.com (WP 4.9.31) F Sep 3, 2026
c*c*e*r*e*e.gr (WP 6.9.7) F Sep 3, 2026
t*d*n*m*q*.com (WP 7.1) F Sep 3, 2026
h*t*l*u*e*t*n*i*e.fr (WP 7.1) F Sep 3, 2026
b*u*a*a*i*h*t*l.gr (WP 6.9.7) F Sep 2, 2026
x*-*l*-*e*l*-*s*e*b*e*q*b.com F Sep 2, 2026
e*c*e*a*e*o*.com (WP 7.1) F Sep 2, 2026
z*p*y*j*t*.com (WP 7.1) F Sep 2, 2026
t*a*r*s*q*e*z*.it F Sep 2, 2026
c*r*a*n*a*l*e*t*a*.com (WP 7.1) F Sep 2, 2026
a*v*a*r*n*.ch (WP 7.0.4) F Sep 2, 2026
e*c*p*-*i*e.com (WP 5.4.1) F Sep 2, 2026
t*u*n*s*l*a*c*.com (WP 6.9.4) F Sep 2, 2026
r*v*n*n*a*r*.com (WP 7.0.4) F Sep 2, 2026
d*n*i*l*a*r*o*t.com (WP 7.1) F Sep 2, 2026
j*x*v*a*i*n.com (WP 7.1) F Sep 2, 2026
d*n*e*t*e*e*t*d*o.com C Sep 2, 2026
c*b*r*t*q*e*e.de (WP 6.0.14) F Sep 1, 2026
t*r*e*b*i*c*u*e*r*.com F Sep 1, 2026
c*l*u*e*d*y*p*.com F Sep 1, 2026
c*l*n*r*t*a*e*s*a*a*i*e.com (WP 7.1) F Sep 1, 2026
l*s*a*r*l*s.com (WP 7.1) F Sep 1, 2026
c*m*a.com F Sep 1, 2026
s*l*v*a*i*n.com (WP 7.1) D Sep 1, 2026
l*r*t*g*l*.com (WP 7.1) F Sep 1, 2026
m*r*y*l*y*m.com (WP 7.1) F Sep 1, 2026
c*e*h*u*i*v*d*o.com (WP 7.1) F Sep 1, 2026
m*r*o*d*r*e*t.com (WP 6.8.8) F Aug 31, 2026
x*v*e*l*t*i*r.com (WP 6.7.7) F Aug 31, 2026
y*r*a*r*n*v*t*h.com (WP 7.1) F Aug 31, 2026