Security snapshot
Across the 3,736 Xstore sites we've scanned, compared to the all-WordPress average.
Grade A 1%
Grade B 2%
Grade C 3%
Grade D 9%
Grade F 84%
Fail the header check (F)84%vs 82.6% avg
Leak usernames32%vs 38.5% avg
Expose a sensitive file3.5%vs 1.8% avg
Use HTTPS95%vs 96.1% avg
Where these sites live — top 20 domain endings
.com
2,780
.co.uk
69
.de
62
.fr
57
.es
49
.gr
45
.pl
41
.org
34
.ru
30
.net
29
.sk
28
.it
27
.nl
26
.com.br
25
.hu
20
.eu
20
.com.au
15
.in
15
.pt
14
.be
14
Xstore Premium / Custom
This theme is not available on WordPress.org. It may be a premium theme, a custom theme, or a theme from a third-party marketplace.
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| d*s*g*e*p*u*t*.com (WP 6.5.5) | F | Sep 3, 2026 | |
| s*q*e*t*.com (WP 7.1) | F | Sep 3, 2026 | |
| r*r*t*e*s*l*s.com (WP 7.1) | F | Sep 3, 2026 | |
| b*u*m*u*t*i*t*i*i*a*.com (WP 6.7.7) | F | Sep 3, 2026 | |
| d*s*r*p*s*o*a*e.com (WP 7.1) | F | Sep 3, 2026 | |
| z*t*a*p*l*n*s.com | F | Sep 3, 2026 | |
| r*e*i*n*c*e*t*v*.com (WP 6.8.8) | F | Sep 3, 2026 | |
| s*a*n*o*a*i*n*.com (WP 7.1) | F | Sep 3, 2026 | |
| e*l*i*s*o*n*o*d.com | F | Sep 3, 2026 | |
| o*m*x*i*.com (WP 6.9) | F | Sep 3, 2026 | |
| c*t*s*e*i.com (WP 6.9.7) | F | Sep 3, 2026 | |
| j*l*e*t*c*a*e.com (WP 6.9.7) | F | Sep 3, 2026 | |
| o*l*l*-*a*s*l*a*g*e*.com (WP 7.1) | D | Sep 3, 2026 | |
| t*m*f*l*x.com | F | Sep 3, 2026 | |
| n*k*a*m*d.c*m.ua (WP 4.6.29) | F | Sep 3, 2026 | |
| z*u*h*d*.com | F | Sep 3, 2026 | |
| e*k*y*o*d*.com (WP 7.1) | F | Sep 3, 2026 | |
| e*k*s*a.com (WP 7.0.4) | F | Sep 3, 2026 | |
| e*k*h*t*l.com (WP 6.8.8) | D | Sep 3, 2026 | |
| e*k*c*i*i*.com (WP 7.0.4) | F | Sep 3, 2026 | |
| n*v*b*.com | F | Sep 3, 2026 | |
| t*s*c*r*t*c*.com (WP 7.0.3) | F | Sep 3, 2026 | |
| c*s*o*r*g*f*c*o*y.com (WP 7.1) | F | Sep 3, 2026 | |
| b*u*d*a*o*t*i*h*.com | F | Sep 3, 2026 | |
| s*o*e*e*y*r*.com (WP 6.9.7) | F | Sep 3, 2026 | |
| s*o*b*a*t*-*o*m*t*c.com (WP 7.1) | F | Sep 2, 2026 | |
| c*s*o*k*l*s*o*e.com (WP 7.1) | C | Sep 2, 2026 | |
| j*l*a*w*o*s*d*.com (WP 7.0.4) | F | Sep 2, 2026 | |
| t*y*e*h*a*s.com (WP 7.1) | F | Sep 2, 2026 | |
| e*e*c*a*p*c*.com | F | Sep 2, 2026 | |
| h*w*i*n*j.com | F | Sep 2, 2026 | |
| k*w*d*a*i*n*s*.com (WP 7.0.4) | F | Sep 2, 2026 | |
| t*y*t*m*n*a*s*u*.com (WP 7.1) | F | Sep 2, 2026 | |
| a*r*i.com (WP 7.1) | F | Sep 2, 2026 | |
| x*-*i*v*r*i*n*s*l*a*r*o*d*b.com (WP 7.1) | F | Sep 2, 2026 | |
| s*l*g*a*d*.c*m.br (WP 7.1) | F | Sep 2, 2026 | |
| c*s*o*b*y*u.com (WP 7.1) | D | Sep 2, 2026 | |
| o*e*t*v*.com | D | Sep 2, 2026 | |
| c*s*p*r*a.com (WP 6.9.4) | F | Sep 2, 2026 | |
| p*r*l*a*a*y.pl (WP 7.0.4) | F | Sep 2, 2026 | |
| a*a*c*s*e*a*a*i*n*s.com (WP 6.7.1) | D | Sep 2, 2026 | |
| k*t*s*k*-*a*e*n*y*.com (WP 7.1) | F | Sep 2, 2026 | |
| r*y*o*d*o*l*c*i*n.com (WP 7.1) | D | Sep 2, 2026 | |
| a*o*o*a*e*i*e.com (WP 7.1) | F | Sep 2, 2026 | |
| o*i*i*a*a*s*r*t*.com (WP 7.1) | B | Sep 2, 2026 | |
| j*d*t*d*e*s*n*.com (WP 7.1) | F | Sep 2, 2026 | |
| g*s*c*s*e*i*s.sk | F | Sep 2, 2026 | |
| h*t*o*a*t.com (WP 5.2.25) | F | Sep 2, 2026 | |
| s*o*t*u*m*r*.com (WP 7.1) | F | Sep 2, 2026 | |
| s*i*e*s*e*r.com (WP 7.0.4) | F | Sep 2, 2026 | |
| e*k*d*n.jp (WP 7.1) | F | Sep 2, 2026 | |
| t*u*t*e*d*n*i*.com (WP 6.7.7) | F | Sep 2, 2026 | |
| b*o*d*h*n*y.com (WP 6.2.9) | F | Sep 2, 2026 | |
| l*v*l*o*k*.es (WP 6.4.10) | F | Sep 2, 2026 | |
| o*f*c*a*u*a*a*s.com (WP 7.0.4) | F | Sep 2, 2026 | |
| o*f*c*a*u*a*a*.com (WP 7.0.4) | F | Sep 2, 2026 | |
| r*u*.c*.uk (WP 7.1) | F | Sep 2, 2026 | |
| r*u*.com (WP 7.1) | F | Sep 2, 2026 | |
| t*e*l*c*c*w*h*p.be (WP 7.1) | F | Sep 2, 2026 | |
| t*u*m*l*n*h*m*.com | F | Sep 2, 2026 | |
| m*r*u*g*-*m*u*a*c*.com | F | Sep 2, 2026 | |
| p*a*t*p*r*s.eu | B | Sep 2, 2026 | |
| p*a*t*a*t*.com | B | Sep 2, 2026 | |
| m*r*w*a*.com (WP 7.1) | F | Sep 2, 2026 | |
| z*h*r*t*.com (WP 6.8.8) | F | Sep 2, 2026 | |
| r*v*g*n*.com (WP 6.8.6) | F | Sep 2, 2026 | |
| d*p*e*b*b*.com (WP 7.1) | F | Sep 2, 2026 | |
| t*s*a*r*c*g*a*.com (WP 6.8.8) | F | Sep 2, 2026 | |
| s*a*e*i*e.com (WP 7.1) | C | Sep 2, 2026 | |
| a*z*d*m*r*e*i*g.com (WP 6.8.8) | D | Sep 2, 2026 | |
| m*r*u*e*.com (WP 7.1) | F | Sep 2, 2026 | |
| e*o*i*x*i*a.com (WP 7.1) | D | Sep 2, 2026 | |
| z*b*a*a*s.com (WP 7.1) | F | Sep 2, 2026 | |
| z*a*i*e*.com (WP 7.1) | F | Sep 2, 2026 | |
| z*a*a*l*w.com (WP 7.1) | F | Sep 2, 2026 | |
| h*s*2*e*r.com (WP 7.1) | F | Sep 2, 2026 | |
| c*r*c*o*c*n*m*n*s*u*i*.com (WP 7.1) | F | Sep 2, 2026 | |
| j*e*m*n.com (WP 7.1) | F | Sep 2, 2026 | |
| j*c*k*s*i*.com (WP 7.1) | F | Sep 2, 2026 | |
| j*c*k*s*c*o*n*.com (WP 7.1) | F | Sep 2, 2026 | |
| t*u*h*e*s*h*r*p*.com (WP 6.9.4) | F | Sep 1, 2026 | |
| o*f*c*o*t*e*j*.com (WP 7.1) | F | Sep 1, 2026 | |
| s*m*k*u*a*t*s*.c*.uk (WP 6.8.1) | F | Sep 1, 2026 | |
| a*e*t*s*e*a*.com | F | Sep 1, 2026 | |
| s*y*e*i*d*n*s*a.com (WP 6.9.7) | F | Sep 1, 2026 | |
| t*-*e*o.fr (WP 5.5.3) | F | Sep 1, 2026 | |
| t*r*e*a*a*e*o*t.com (WP 7.1) | F | Sep 1, 2026 | |
| i*a*p*s*s.c*m.ec (WP 7.0.2) | F | Sep 1, 2026 | |
| a*s*c*a*i*n*i*a*b*n*a*t*.org (WP 7.1) | F | Sep 1, 2026 | |
| z*v*r*k*t*t.com (WP 6.8.8) | F | Sep 1, 2026 | |
| e*m*i*p*a*t*.com (WP 7.1) | F | Sep 1, 2026 | |
| c*l*u*i*m*s*a*n.com | F | Sep 1, 2026 | |
| s*a*t*o*y*r*.c*.uk (WP 7.0.4) | F | Sep 1, 2026 | |
| d*c*r*d*n*.c*.uk (WP 7.1) | F | Sep 1, 2026 | |
| h*x*n*e*z*n.de (WP 6.8.1) | F | Sep 1, 2026 | |
| c*l*u*e*t*r*j*g*s.com | F | Sep 1, 2026 | |
| c*c*e*o*e*.com | F | Sep 1, 2026 | |
| t*r*a*o*e*i*.com (WP 7.1) | F | Sep 1, 2026 | |
| t*e*o*k*o*n*r.org (WP 7.1) | F | Sep 1, 2026 | |
| r*r*r*a*a*i*e*s.com (WP 7.1) | F | Sep 1, 2026 |