Security snapshot
Across the 3,736 Xstore sites we've scanned, compared to the all-WordPress average.
Grade A 1%
Grade B 2%
Grade C 3%
Grade D 9%
Grade F 84%
Fail the header check (F)84%vs 82.6% avg
Leak usernames32%vs 38.5% avg
Expose a sensitive file3.5%vs 1.8% avg
Use HTTPS95%vs 96.1% avg
Where these sites live — top 20 domain endings
.com
2,780
.co.uk
69
.de
62
.fr
57
.es
49
.gr
45
.pl
41
.org
34
.ru
30
.net
29
.sk
28
.it
27
.nl
26
.com.br
25
.hu
20
.eu
20
.com.au
15
.in
15
.pt
14
.be
14
Xstore Premium / Custom
This theme is not available on WordPress.org. It may be a premium theme, a custom theme, or a theme from a third-party marketplace.
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| g*m*i*a*s.o*g.uk (WP 6.8.1) | F | Aug 8, 2026 | |
| f*o*d*f*r*e*s*e*.de (WP 6.8.1) | F | Aug 8, 2026 | |
| b*l*r*o.com (WP 7.0.3) | F | Aug 8, 2026 | |
| l*k.no | F | Aug 8, 2026 | |
| p*r*a*r*a*.gr (WP 6.8.7) | F | Aug 8, 2026 | |
| c*r*i*t*r.net | F | Aug 8, 2026 | |
| j*h*i*a*t.ru | F | Aug 8, 2026 | |
| r*c*c*i*g*l*s*.c*.uk (WP 6.8.1) | F | Aug 8, 2026 | |
| b*k*b*x*i*e*o*e*t*y.c*.uk (WP 6.8.1) | F | Aug 8, 2026 | |
| b*k*b*x*i*e*a*w*c*s*i*e.c*.uk (WP 6.8.1) | F | Aug 8, 2026 | |
| i*t*r*a*i*n*l*o*y.de | F | Aug 8, 2026 | |
| e*i*a*.shop (WP 7.0) | F | Aug 8, 2026 | |
| m*r*a*o*a*a*i.com (WP 7.0) | F | Aug 8, 2026 | |
| c*r*y*e*o*e.c*.uk (WP 6.8.1) | F | Aug 8, 2026 | |
| j*n*p*r*r*e*p*o*o*r*p*y.c*.uk (WP 6.8.1) | F | Aug 7, 2026 | |
| b*i*i*h*i*i*a*y*a*g*s.c*.uk (WP 7.0.3) | F | Aug 7, 2026 | |
| a*i*h*r*.gr (WP 5.9.15) | F | Aug 7, 2026 | |
| s*a*.c*m.gr | F | Aug 7, 2026 | |
| s*d*s*k*l*n*a.pl (WP 7.0.3) | F | Aug 7, 2026 | |
| d*r*t*m*e*h*f.de (WP 7.0.3) | D | Aug 7, 2026 | |
| d*y*p*.fr | F | Aug 7, 2026 | |
| v*t*l*p*.fr | F | Aug 7, 2026 | |
| r*m*o*u*.c*m.ar (WP 7.0.3) | F | Aug 7, 2026 | |
| m*t*r*s*i*e*b*r*h*.it (WP 7.0.3) | F | Aug 7, 2026 | |
| s*a*d.ru (WP 5.6) | F | Aug 7, 2026 | |
| s*r*v*o*c*o*.cz (WP 6.9.5) | F | Aug 7, 2026 | |
| a*r*c*n*h*n*s.org (WP 7.0.3) | D | Aug 6, 2026 | |
| o*i*i*a*o*r*n*e.c*m.br (WP 7.0.2) | F | Aug 6, 2026 | |
| l*g*t*a*s.c*m.br | D | Aug 6, 2026 | |
| d*h*s*s*i.c*m.br (WP 6.6.5) | F | Aug 6, 2026 | |
| e*c*u*i*e.tn (WP 7.0.2) | F | Aug 6, 2026 | |
| p*o*o*o*k.c*m.tw (WP 6.8.6) | F | Aug 6, 2026 | |
| d*s*o*i*h*.com (WP 6.9.4) | F | Aug 6, 2026 | |
| d*m*s*.c*m.mx | A | Aug 6, 2026 | |
| r*b*r*o*l*c*r*l*i.com | F | Aug 6, 2026 | |
| g*d*c*e*a.ru (WP 7.0.2) | F | Aug 6, 2026 | |
| s*l*c*i*e.pt (WP 7.0.2) | F | Aug 6, 2026 | |
| z*y*.ch (WP 7.0.2) | D | Aug 6, 2026 | |
| c*t*t.no (WP 7.0.2) | B | Aug 6, 2026 | |
| s*e*o*d*c*n*d*.org (WP 7.0.2) | F | Aug 6, 2026 | |
| e*f*r.es | F | Aug 6, 2026 | |
| m*t*l*a*e.com (WP 7.0.2) | F | Aug 6, 2026 | |
| s*a*m*a*h*e*i*p*i*t.de | F | Aug 6, 2026 | |
| d*d.es (WP 6.9.5) | F | Aug 6, 2026 | |
| g*o*p*.org (WP 6.8.1) | F | Aug 6, 2026 | |
| n*j*a*s*e*o*i*.pl (WP 6.0.11) | F | Aug 5, 2026 | |
| n*v*f*u*.nl (WP 7.0.2) | D | Aug 5, 2026 | |
| n*n*b*a*d.net (WP 7.0.2) | F | Aug 5, 2026 | |
| s*o*6.ru (WP 5.5.1) | F | Aug 5, 2026 | |
| s*u*d*l*c*r*n*c*.ca | F | Aug 5, 2026 | |
| k*r*m*k.c*m.br (WP 7.0.2) | C | Aug 5, 2026 | |
| j*z*k*v*s*o*a*o.sk | F | Aug 5, 2026 | |
| e*t*.pl | D | Aug 5, 2026 | |
| m*r*a*o*e*r*.c*m.br (WP 6.9.5) | F | Aug 5, 2026 | |
| g*t*c*s.org (WP 7.0.2) | F | Aug 5, 2026 | |
| s*a*e*a*i*w*.pl (WP 7.0.2) | A | Aug 5, 2026 | |
| c*e*h*r*t*y*h*p.c*.uk (WP 6.8.1) | F | Aug 5, 2026 | |
| a*s*e*u*h*p*e*.com (WP 7.0.2) | F | Aug 5, 2026 | |
| g*e*u*a*r*.pl (WP 6.9) | F | Aug 5, 2026 | |
| p*s*i*e.click (WP 6.9.4) | F | Aug 5, 2026 | |
| w*n*l*n*.c*m.ua | F | Aug 5, 2026 | |
| a*r*e*i*a.ru (WP 6.7.2) | F | Aug 5, 2026 | |
| b*n*s*w*l*d*s.c*.uk (WP 7.0.2) | F | Aug 5, 2026 | |
| f*t*r*f*t*e*s.com (WP 7.0.2) | F | Aug 4, 2026 | |
| m*k*y*u*s*c*e*s.co | F | Aug 4, 2026 | |
| v*t*l*s*o*.net (WP 7.0.2) | F | Aug 4, 2026 | |
| m*l*i*k*e*.ru (WP 5.8.13) | F | Aug 4, 2026 | |
| h*p*y*o*o*s.mx (WP 7.0.2) | F | Aug 4, 2026 | |
| o*t*i*.org (WP 7.0.2) | F | Aug 4, 2026 | |
| w*f*e*l*n*.at | F | Aug 4, 2026 | |
| s*o*e*o*b*r*i.it (WP 7.0.2) | F | Aug 4, 2026 | |
| w*s*u*p*r*s.es (WP 6.1.10) | F | Aug 4, 2026 | |
| l*n*o*m*t*r*y*l*m*t.c*.uk (WP 6.8.1) | F | Aug 4, 2026 | |
| f*n*e*m.com (WP 5.8.13) | F | Aug 4, 2026 | |
| s*o*t*e*d*t.ca (WP 6.8.1) | F | Aug 4, 2026 | |
| f*c*s*a*b*r*.c*m.br (WP 7.0.2) | F | Aug 4, 2026 | |
| t*r*a*e*g*n*e*i*g.c*m.au (WP 6.9.4) | F | Aug 4, 2026 | |
| l*n*g*n.my (WP 6.4.3) | B | Aug 4, 2026 | |
| c*n*r*s*g.com | D | Aug 4, 2026 | |
| p*n*o*i*o*.co | F | Aug 4, 2026 | |
| y*c*t*a*t*r.c*.za (WP 7.0.2) | F | Aug 4, 2026 | |
| t*u*t*e*s.finance (WP 7.0.2) | F | Aug 4, 2026 | |
| r*d*o*c*.c*.uk (WP 7.0.2) | F | Aug 4, 2026 | |
| a*r*b*z*a.com | F | Aug 4, 2026 | |
| s*e*o*d*-*a*a*a.is (WP 7.0.2) | F | Aug 4, 2026 | |
| k*l*n*u*d*o*.com (WP 7.0.2) | F | Aug 4, 2026 | |
| p*j*h*m*.c*.id | D | Aug 4, 2026 | |
| v*s*a*d*l.be (WP 7.0.2) | F | Aug 4, 2026 | |
| v*s*a*d*l.net (WP 7.0.2) | F | Aug 4, 2026 | |
| r*e*s*a*n*e*.com (WP 5.7.12) | F | Aug 4, 2026 | |
| z*e*a*k*.c*m.pl (WP 7.0.2) | F | Aug 4, 2026 | |
| m*r*i*a*a*l*.de (WP 6.3.7) | F | Aug 4, 2026 | |
| b*a*s*h*o*u*i*o*m*.c*.uk (WP 7.0.2) | A | Aug 4, 2026 | |
| v*n*e*.c*m.tr (WP 6.9.5) | F | Aug 4, 2026 | |
| f*i*v*l*e*h*r*a*y.c*.uk | D | Aug 4, 2026 | |
| f*c*t*n*d.es (WP 6.3.8) | F | Aug 4, 2026 | |
| s*n*r*n*h*m*p*l*j*i*e.c*.uk (WP 6.9.4) | F | Aug 3, 2026 | |
| b*t*e*a*9*5.c*m.au | F | Aug 3, 2026 | |
| w*s*g*a*t.de | F | Aug 3, 2026 | |
| m*j*v*n*t*k*.eu | F | Aug 3, 2026 |