Security snapshot
Across the 3,736 Xstore sites we've scanned, compared to the all-WordPress average.
Grade A 1%
Grade B 2%
Grade C 3%
Grade D 9%
Grade F 84%
Fail the header check (F)84%vs 82.6% avg
Leak usernames32%vs 38.5% avg
Expose a sensitive file3.5%vs 1.8% avg
Use HTTPS95%vs 96.1% avg
Where these sites live — top 20 domain endings
.com
2,780
.co.uk
69
.de
62
.fr
57
.es
49
.gr
45
.pl
41
.org
34
.ru
30
.net
29
.sk
28
.it
27
.nl
26
.com.br
25
.hu
20
.eu
20
.com.au
15
.in
15
.pt
14
.be
14
Xstore Premium / Custom
This theme is not available on WordPress.org. It may be a premium theme, a custom theme, or a theme from a third-party marketplace.
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| t*w*y*.com (WP 7.0.4) | F | Sep 4, 2026 | |
| s*a*t*i*h*t.com | F | Sep 4, 2026 | |
| j*s*s*o*t*t*r*.com (WP 7.1) | F | Sep 4, 2026 | |
| r*i*e*s*y*e.com (WP 5.4.1) | F | Sep 4, 2026 | |
| c*g*o*p*o*n*a*i*n.org (WP 6.8.1) | F | Sep 4, 2026 | |
| t*a*s*i*a*g*.com (WP 4.9.26) | F | Sep 4, 2026 | |
| a*d*c*e*w*m*n*h*p.com (WP 7.1) | D | Sep 4, 2026 | |
| m*s*i*e*e*w*r*s.com (WP 7.1) | F | Sep 4, 2026 | |
| m*s*i*e*a*k*p.com (WP 7.1) | F | Sep 4, 2026 | |
| x*o*g*n*h*e*n*m.com (WP 7.1) | C | Sep 4, 2026 | |
| a*d*z*.com (WP 6.9.4) | D | Sep 4, 2026 | |
| e*t*e*l*t*i*g.com (WP 7.1) | F | Sep 4, 2026 | |
| e*t*o*.com | F | Sep 4, 2026 | |
| x*r*m*f*s*i*g*a*t*.com (WP 5.4.6) | F | Sep 4, 2026 | |
| w*s*l*r*d*i*k*.c*m.pl (WP 7.1) | F | Sep 4, 2026 | |
| a*a*e*y*a*e*n*b*d*.c*m.au | C | Sep 4, 2026 | |
| x*r*m*-*o*l*.com (WP 6.9.4) | F | Sep 4, 2026 | |
| x*r*m*-*p*e*s*o*.com | F | Sep 4, 2026 | |
| r*n*d*a*.com (WP 7.1) | F | Sep 4, 2026 | |
| t*a*a*a*e*s.com (WP 7.1) | F | Sep 4, 2026 | |
| t*o*r*x.com (WP 7.1) | F | Sep 4, 2026 | |
| e*t*t*c*a*a*o*a.com (WP 7.1) | A | Sep 4, 2026 | |
| k*m*h*y*r*e*t*a.com (WP 7.1) | F | Sep 4, 2026 | |
| t*a*i*t*u*.com (WP 7.1) | F | Sep 4, 2026 | |
| d*s*r*r*c*.com | F | Sep 4, 2026 | |
| b*g*m*i*r*t*o*.com (WP 7.1) | F | Sep 3, 2026 | |
| c*p*u*f*o*e*b*u*i*u*.com | F | Sep 3, 2026 | |
| a*e*i*a*u*e*m*r*.com (WP 7.1) | F | Sep 3, 2026 | |
| b*c*a*k*o*g*e*.com (WP 7.1) | D | Sep 3, 2026 | |
| h*a*t*-*a*k*.com (WP 7.1) | F | Sep 3, 2026 | |
| j*s*h*r*w*c*.com (WP 7.1) | F | Sep 3, 2026 | |
| g*i*s*u*l*k.com | F | Sep 3, 2026 | |
| x*a*p*o*f*a*s.com | F | Sep 3, 2026 | |
| z*d*a*l*f*s*i*n*e*.com (WP 7.1) | D | Sep 3, 2026 | |
| h*r*o*y*i*e.gr (WP 6.9.7) | D | Sep 3, 2026 | |
| p*o*a*a.hu | F | Sep 3, 2026 | |
| d*s*a*t*a*l*n*.com (WP 7.1) | F | Sep 3, 2026 | |
| x*r*s*t*c*h*p.com | F | Sep 3, 2026 | |
| a*e*i*a*s*a*d*r*d*y*a*l.com (WP 7.0.4) | F | Sep 3, 2026 | |
| a*e*i*a*s*l*c*s*a*.com | F | Sep 3, 2026 | |
| e*t*m*a*o*.com | F | Sep 3, 2026 | |
| d*o*a*a*e*f*m*s.com (WP 7.1) | F | Sep 3, 2026 | |
| c*l*l*m*n*o*d*l*u*d*.com (WP 7.1) | F | Sep 3, 2026 | |
| o*n*v*l*e*o.com (WP 7.1) | F | Sep 3, 2026 | |
| c*g*u*-*b.com (WP 7.1) | F | Sep 3, 2026 | |
| c*g*u*-*o*p*t*l*t*.com (WP 7.1) | F | Sep 3, 2026 | |
| s*a*t*i*z*h*e*.com (WP 7.1) | F | Sep 3, 2026 | |
| d*l*u*.com (WP 6.8.3) | F | Sep 3, 2026 | |
| z*i*k*r*d*c*s.com (WP 5.4.21) | F | Sep 3, 2026 | |
| h*c*e*.c*.il (WP 7.1) | D | Sep 3, 2026 | |
| z*a*a*a*e*e*t*.com (WP 7.1) | F | Sep 3, 2026 | |
| s*u*i*h*e*r.com (WP 6.8.8) | D | Sep 3, 2026 | |
| j*s*a*a*a*z*c*n*u*t*r*s.com (WP 7.1) | F | Sep 3, 2026 | |
| e*s*x*a*n*r*.com | F | Sep 3, 2026 | |
| m*s*c*a*.com (WP 7.1) | F | Sep 3, 2026 | |
| t*a*l*e*i*e.com (WP 6.5.10) | F | Sep 3, 2026 | |
| z*z*d*l*.com (WP 7.0) | F | Sep 3, 2026 | |
| c*c*e*p*i*t*o*l*n*.de (WP 6.7.7) | F | Sep 3, 2026 | |
| c*c*e*p*i*t.com (WP 6.7.7) | F | Sep 3, 2026 | |
| a*i*m*m*t*l*t*r*.c*m.br (WP 7.1) | F | Sep 3, 2026 | |
| b*x*k*r*n*.com (WP 7.1) | C | Sep 3, 2026 | |
| n*x*e*e*.com (WP 6.7.7) | F | Sep 3, 2026 | |
| z*p*e*s*e*f*r*a*c*.com | F | Sep 3, 2026 | |
| m*s*r*t*o.com (WP 7.1) | F | Sep 3, 2026 | |
| e*s*y*p*r*s.com (WP 7.1) | F | Sep 3, 2026 | |
| d*e*z*u*o*o*y.com (WP 7.1) | F | Sep 3, 2026 | |
| a*e*e*l*.com (WP 6.9.7) | F | Sep 3, 2026 | |
| a*e*i*7.com (WP 7.0.4) | C | Sep 3, 2026 | |
| d*d*r*c*.com (WP 7.1) | F | Sep 3, 2026 | |
| n*w*o*d*p*l*k*.com (WP 6.7.2) | F | Sep 3, 2026 | |
| z*n*o*u*i*n*.com | F | Sep 3, 2026 | |
| c*i*l*r.c*m.br (WP 5.9.13) | F | Sep 3, 2026 | |
| e*q*e*a*a*g*n*i*a*m*r*c*n*.com (WP 6.8.2) | F | Sep 3, 2026 | |
| m*r*i*g*t*r*o*l*.c*m.br | F | Sep 3, 2026 | |
| e*p*i*j*a*l*e*i*.com | F | Sep 3, 2026 | |
| e*p*i*d*s*l.com (WP 5.4.21) | F | Sep 3, 2026 | |
| m*s*a*a*.com (WP 7.1) | F | Sep 3, 2026 | |
| i*m*g*o*p.c*.uk (WP 6.8.1) | F | Sep 3, 2026 | |
| b*u*u*a*a*s.com (WP 7.0.4) | F | Sep 3, 2026 | |
| b*u*u*a*a*.com (WP 7.0.4) | F | Sep 3, 2026 | |
| d*a*o*d*e*v*c*s*g.com (WP 7.0.4) | F | Sep 3, 2026 | |
| k*s*l*c*i*n*.com (WP 7.0.3) | F | Sep 3, 2026 | |
| k*s*o*s*s*.com (WP 7.1) | F | Sep 3, 2026 | |
| s*a*t*a*-*r*u*.com | F | Sep 3, 2026 | |
| x*-*s*e*v*g*e*e*-*l*.com (WP 6.9.7) | F | Sep 3, 2026 | |
| c*l*d*i*h*.com (WP 7.1) | F | Sep 3, 2026 | |
| r*a*t*i*.com (WP 5.6.12) | F | Sep 3, 2026 | |
| s*r*t*s.com (WP 7.1) | F | Sep 3, 2026 | |
| a*b*l*n*i*s*u*.com (WP 7.1) | F | Sep 3, 2026 | |
| s*a*t*m*l*s.com (WP 6.0.14) | F | Sep 3, 2026 | |
| s*a*t*l*d*e*s.com (WP 7.1) | F | Sep 3, 2026 | |
| s*a*t*l*d*e*.com (WP 7.1) | F | Sep 3, 2026 | |
| z*a*e*a*i.com (WP 7.1) | F | Sep 3, 2026 | |
| c*r*s*i*d*.com (WP 7.1) | F | Sep 3, 2026 | |
| p*i*t*a*s.com | F | Sep 3, 2026 | |
| z*o*g*d*.com (WP 7.1) | F | Sep 3, 2026 | |
| s*a*l*p*e*t*.com (WP 7.1) | F | Sep 3, 2026 | |
| r*u*o*f*n*.com (WP 7.1) | C | Sep 3, 2026 | |
| i*m*d*s.com (WP 7.1) | F | Sep 3, 2026 | |
| d*s*g*e*p*u*t*.com (WP 6.5.5) | F | Sep 3, 2026 |