WordPress maintenance or security needs? Reach out!
TLDWP

Theme: Headway (Used by 1,040 domains)

Security snapshot

Across 1,040 Headway WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 1% Grade C 8% Grade D 7% Grade F 84%
Fail the header check (F)84%vs 82.5% avg
Leak usernames48%vs 38.5% avg
Expose a sensitive file2%vs 1.8% avg
Use HTTPS96%vs 96.2% avg

What stands out

TLDWP currently associates 1,040 indexed WordPress sites with Headway, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 48.1% versus 38.5% overall (+9.6 percentage points).

Header-grade F is 84.2% vs 82.5% overall (+1.7 pp); Sensitive-file exposure is 2% vs 1.8% overall (+0.2 pp); HTTPS adoption is 96% vs 96.2% overall (-0.2 pp).

These are observational associations among sites where TLDWP detected Headway, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Where these sites live — top 20 domain endings
.com 903
.org 37
.co.uk 13
.net 12
.online 10
.de 7
.fr 6
.info 5
.ca 5
.sk 3
.nl 3
.at 2
.nyc 2
.se 2
.co.il 1
.dk 1

Headway Premium / Custom

This theme is not available on WordPress.org. It may be a premium theme, a custom theme, or a theme from a third-party marketplace.

DomainVersionExposuresHeadersLast Checked
o*l*n*-*a*k*t*n*-*t*l*a.com (WP 6.9.7) 3.6.3· 100% conf. F Sep 9, 2026
d*e*k*d*m*e.com (WP 7.1) 3.6.3· 100% conf. F Sep 9, 2026
k*n*o*i*a*i*.sk (WP 4.9.31) 3.8.8· 100% conf. F Sep 9, 2026
f*o*t*l*a*.com (WP 7.1) 3.8.9· 100% conf. F Sep 9, 2026
o*g*a*.com (WP 5.5.1) F Sep 9, 2026
h*p*i*y*p*c*.com (WP 4.4.33) 3.5.13· 100% conf. F Sep 9, 2026
i*h*n*a*t.info (WP 6.8.1) D Sep 9, 2026
k*l*a*-*h*t*l*s*i*g.com (WP 6.7.7) 3.8.8· 100% conf. F Sep 9, 2026
o*e*n*r*d*e*t*i*t.com (WP 7.0.4) 3.7.17· 100% conf. F Sep 9, 2026
f*y*i*e*u*d*s.com 3.9.1· 100% conf. C Sep 8, 2026
f*u*h*n*a*d*a*a*c*l*c*s*i*h.com (WP 7.1) 3.8.3· 100% conf. F Sep 8, 2026
e*e*l*l*g*l.com (WP 7.0.4) 3.8.2· 100% conf. F Sep 8, 2026
d*y*h*r*w*o*.com (WP 7.0.4) 3.8.2· 100% conf. F Sep 8, 2026
s*u*h*u*r*y*e*t*s*.com (WP 7.0.4) 3.4.9· 100% conf. F Sep 8, 2026
r*c*m*n*b*e*s.com (WP 7.0.4) 3.8.9· 100% conf. D Sep 8, 2026
z*m*i.org (WP 7.1) F Sep 8, 2026
a*s*l*a*t.com F Sep 8, 2026
e*e*c*n*e*t*.com (WP 7.1) F Sep 8, 2026
f*r*t*c*c*.com C Sep 8, 2026
s*u*h*a*d*v*r*e.com (WP 7.0.4) F Sep 8, 2026
t*u*h*a*t*a*d*e*s*n.com (WP 7.1) F Sep 8, 2026
d*v*d*u*p*i*.com (WP 6.5.10) F Sep 8, 2026
f*n*i*g*o*l*g*s.com (WP 7.1) F Sep 8, 2026
h*g*p*r*o*m*n*e*e*t*n*a*d*i*c*n*i*i*n*n*.com (WP 7.0.4) F Sep 8, 2026
h*g*l*n*s*a*d*c*p*.com (WP 7.1) F Sep 8, 2026
d*v*d*a*r*n.com (WP 7.0.4) F Sep 8, 2026
k*t*h*n*r*a*i*n*i*c.com C Sep 8, 2026
a*n*c*r*l*e*.com (WP 6.8.8) F Sep 8, 2026
h*g*i*s*o*y.com (WP 4.4.33) F Sep 8, 2026
b*a*c*e*b*o*.com F Sep 8, 2026
a*n*p*r*r*d*e.com (WP 6.7.1) F Sep 8, 2026
m*s*a*e*l*b*s*b*l*.com (WP 7.0.4) D Sep 8, 2026
d*v*d*b.com (WP 7.0.4) F Sep 8, 2026
d*v*n*r*n*p*r*a*i*n.com D Sep 8, 2026
e*p*r*p*w*r*a*h*n*.com F Sep 7, 2026
h*a*a*h*m*t*r*n*.com (WP 7.1) F Sep 7, 2026
h*a*o*g*.com (WP 7.1) F Sep 7, 2026
s*m*t*c*e*s*e*t*v*s.com D Sep 7, 2026
d*t*d*a*o*d*.com (WP 4.9.26) F Sep 7, 2026
o*i*i*a*i*i.com F Sep 7, 2026
o*i*e*s*i*h*n*c*i*s.com (WP 7.1) F Sep 7, 2026
s*l*t*o*s*f*m*l*e*.com (WP 7.0.4) F Sep 7, 2026
w*l*a*t*v*w*a*.com F Sep 7, 2026
h*a*w*y.org (WP 7.0.2) D Sep 7, 2026
b*y*a*d*u*l*.com (WP 7.1) F Sep 7, 2026
b*x*s*o*b*r*s.com (WP 6.7) F Sep 7, 2026
e*e*c*s*a*d*o*m*n*s.com (WP 4.7.6) F Sep 7, 2026
e*a*d*y*e.com C Sep 7, 2026
r*t*i*i*d*a*e*.com (WP 7.0.4) F Sep 7, 2026
s*l*i*b*d*.com (WP 7.0.4) F Sep 7, 2026
b*u*c*a*e*a*d*i*.com (WP 7.1) F Sep 7, 2026
b*u*d*n*u*t*m*d*a.com (WP 7.1) F Sep 7, 2026
u*d*r*c*r*s.fr (WP 6.9.7) F Sep 7, 2026
o*e*n*a*-*i*l*s.com (WP 4.2.38) F Sep 7, 2026
t*i*l*t*o*p.com (WP 7.0.4) F Sep 7, 2026
s*l*a*d*e*t*d.com C Sep 7, 2026
b*t*o*l*n*l*w*r*u*.com (WP 6.8.8) F Sep 7, 2026
s*u*h*a*o*a*a*l*y*c*a*t*r*.com (WP 6.9.7) F Sep 7, 2026
e*a*i*i*g*h*e*a*i*e*.com (WP 7.1) F Sep 7, 2026
s*l*r*b*o*t.com F Sep 7, 2026
w*l*e*w*i*i*g*e*v*c*s.com (WP 7.1) F Sep 6, 2026
a*h*e*m*h*f*e*.com (WP 7.0.4) F Sep 6, 2026
k*l*a*n*y*o*a*.com (WP 6.0.14) F Sep 6, 2026
d*s*g*a*r*e*t*n*a*d*o*l*n*l*c.com (WP 6.8.8) F Sep 6, 2026
d*n*a*l*b*a*o*d*e*.com C Sep 6, 2026
f*i*n*s*f*i*t*r*c*e*g*l*y.org (WP 7.0.4) F Sep 6, 2026
s*l*h*l*t*m*t*c*r*.c*.uk (WP 7.1) F Sep 6, 2026
r*s*r*a*d*p*r*.com (WP 7.0.4) F Sep 6, 2026
e*o*u*i*n*f*a*.com F Sep 6, 2026
s*g*-*r*h*t*c*s.com (WP 6.8.8) F Sep 6, 2026
h*n*i*u*d*s*g*.com (WP 7.0.4) F Sep 6, 2026
e*e*c*d*e*r*i*g.com (WP 7.0.4) F Sep 6, 2026
b*o*s*r*p*n*.com (WP 5.7.17) D Sep 6, 2026
m*y*-*h*n*h*i.com (WP 5.7.2) F Sep 6, 2026
d*r*s*e*t*h*r*h*f*h*i*t.com F Sep 6, 2026
m*d*p*y*i*.c*m.au (WP 7.0.4) F Sep 6, 2026
d*n*e*o*e*g*n*e*i*g.com (WP 4.9.26) F Sep 6, 2026
e*e*m*r*c*e*t*v*s*u*i*s.com (WP 7.0.4) F Sep 6, 2026
a*d*l*v*h*r*i*l*n*.com (WP 5.0.27) F Sep 6, 2026
n*c*e*e*a*s*r*e*n*.com (WP 7.1) F Sep 6, 2026
d*n*p*a*y*.com (WP 7.0.4) F Sep 6, 2026
s*c*a*m*d*a*l*m*u*.com (WP 7.1) C Sep 5, 2026
y*r*y*r*p*r*.com (WP 7.1) F Sep 5, 2026
a*c*e*s*o*e*p*e*r*a*r*s.com (WP 7.1) F Sep 5, 2026
d*m*n*h*r*t*r*p*r*i*s.com (WP 5.1.8) F Sep 5, 2026
b*o*j*n*i*e*.com (WP 7.0.4) F Sep 5, 2026
y*l*o*s*o*e*i*o*u*e.com (WP 7.0.4) F Sep 5, 2026
d*n*e*a*u*e*l*e*s.com (WP 7.0.4) F Sep 5, 2026
a*a*o*i*a*g*f*s.com (WP 7.0.4) F Sep 5, 2026
d*n*s*o*u*a.com (WP 7.0.4) F Sep 5, 2026
s*c*l*9*e*e*t*o*.com (WP 4.7.35) D Sep 5, 2026
d*l*a*i*v*s*i*a*i*n*.com C Sep 5, 2026
m*u*e*i*e*u*l*r*a*.com (WP 7.1) F Sep 5, 2026
d*n*a*e*e*g*n*y*r*a*d*.com (WP 7.1) F Sep 5, 2026
s*o*t*a*k*.com F Sep 5, 2026
f*t*a*t*r*p*i*a*.com (WP 6.2.11) F Sep 5, 2026
r*d*a*d*p*w*i*c.com (WP 7.1) F Sep 5, 2026
d*i*e*e*g*n*e*i*g.com (WP 7.1) F Sep 5, 2026
g*b*r*s*o*b*r*i*u*g*h*b*m*e.at (WP 5.4.21) F Sep 5, 2026
d*n*h*p*.com (WP 7.1) F Sep 5, 2026