WordPress maintenance or security needs? Reach out!
TLDWP

Theme: astra (Used by 402,190 domains)

Security snapshot

Across 402,190 astra WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 1% Grade B 2% Grade C 3% Grade D 11% Grade F 84%
Fail the header check (F)84%vs 84.2% avg
Leak usernames52%vs 45.3% avg
Expose a sensitive file1.6%vs 1.8% avg
Use HTTPS98%vs 97.4% avg

What stands out

TLDWP currently associates 402,190 indexed WordPress sites with astra, equivalent to 5.4% of the current WordPress dataset.

The largest measured difference is username enumeration: 51.6% versus 45.3% overall (+6.3 percentage points).

HTTPS adoption is 98.3% vs 97.4% overall (+0.9 pp); Header-grade F is 83.5% vs 84.2% overall (-0.7 pp); Sensitive-file exposure is 1.6% vs 1.8% overall (-0.2 pp).

These are observational associations among sites where TLDWP detected astra, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Infrastructure patterns

Infrastructure detected alongside astra. Percentages are within sites where that specific signal was detectable; the baseline compares the same signal across detected WordPress sites overall.

PHP versions 65,803 detected · 16.4% coverage
8.2 25% 1.59× baseline 8.3 22.8% 1.07× baseline 8.1 14.1% 1.36× baseline
Web servers 298,861 detected · 74.3% coverage
Apache 33% 1.06× baseline nginx 26.8% 0.83× baseline cloudflare 22.7% 0.96× baseline
CDNs / WAFs 72,548 detected · 18% coverage
Cloudflare 93.9% 1.02× baseline Fastly 3.9% 0.92× baseline QUIC.cloud 0.7% 2.08× baseline
Hosting networks 303,498 detected · 75.4% coverage
Cloudflare, Inc. 18.8% 0.98× baseline Oracle Corporation 12.4% 1.7× baseline IONOS SE 6.3% 1.17× baseline

Co-occurrence describes technologies observed on the same sites. Detection coverage varies by signal, and an association does not imply that one technology caused or selected another.

Similar security profiles

Closest among widely detected themes by average difference across header-grade F, username enumeration, exposed-file, and HTTPS rates.

hello-elementor 585,305 sites 1.1 pp avg difference neve 37,097 sites 1.3 pp avg difference twentytwentyfive 51,523 sites 1.4 pp avg difference Divi 457,061 sites 1.4 pp avg difference

Profile similarity reflects these four observed rates only; it does not imply a technical relationship, shared ownership, or causation.

Explore more TLDWP data: Themes Plugins PHP versions Servers CDNs / WAFs
Where these sites live — top 20 domain endings
.com 297,123
.org 12,717
.de 10,713
.fr 8,325
.nl 4,615
.net 4,541
.pl 3,529
.co.uk 3,436
.es 3,367
.dk 2,547
.com.br 2,412
.ca 2,190
.com.au 2,184
.ru 2,053
.it 1,946
.eu 1,811
.cz 1,787
.ch 1,674
.se 1,359
.in 1,274
DomainVersionExposuresHeadersLast Checked
***************.com (WP 7.1.3) 3.7.5· 100% conf.HIGH4 vulnerability matches F Oct 13, 2026
***********.com (WP 7.1.3) 4.8.1· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
******************.com (WP 7.1.3) 4.14.0· 100% conf. F Oct 13, 2026
***********.com (WP 6.7.10) 4.14.0· 100% conf. — D Oct 13, 2026
**********.com (WP 6.4.1) 4.7.0· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
****.org (WP 7.1.3) 4.14.0· 100% conf. D Oct 13, 2026
************.com (WP 7.0.2) 4.13.8· 100% conf.HIGH1 vulnerability match F Oct 13, 2026
*****************.com (WP 6.9.10) 4.7.3· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
***************.com (WP 6.9.7) 4.11.8· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
*********.ca (WP 7.1.3) 3.9.4· 100% conf.HIGH4 vulnerability matches F Oct 13, 2026
**********.com (WP 7.1.3) 4.14.0· 100% conf. F Oct 13, 2026
*************.com (WP 7.1.3) 4.10.0· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
****************.de (WP 7.1.3) 4.13.4· 100% conf.HIGH1 vulnerability match F Oct 13, 2026
**************.com 4.11.10· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
*********************.com (WP 7.1.3) 4.6.2· 100% conf.HIGH4 vulnerability matches F Oct 13, 2026
*****.com 4.14.0· 100% conf. B Oct 13, 2026
*************.com 4.9.2· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
*****.com (WP 7.1.3) 4.14.0· 100% conf. — F Oct 13, 2026
************.com (WP 7.1.3) 4.0.2· 100% conf.HIGH4 vulnerability matches F Oct 13, 2026
********.com 4.1.3· 100% conf.HIGH4 vulnerability matches D Oct 13, 2026
***********.com (WP 7.1.3) 4.14.0· 100% conf. — F Oct 13, 2026
*********.com (WP 6.8) 4.7.0· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
**********.com (WP 7.1.3) 4.13.5· 100% conf.HIGH1 vulnerability match D Oct 13, 2026
*******************.com (WP 7.1.3) 4.11.2· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
***********.cl (WP 6.9.10) 4.13.2· 100% conf.HIGH1 vulnerability match F Oct 13, 2026
******.me (WP 6.8.11) 4.14.0· 100% conf. F Oct 13, 2026
***********.com (WP 7.1.3) 4.11.14· 100% conf.HIGH2 vulnerability matches D Oct 13, 2026
**************.com (WP 7.1.3) 4.6.11· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
****************.com (WP 6.4.13) 4.6.3· 100% conf.HIGH4 vulnerability matches F Oct 13, 2026
************.com (WP 7.1.2) 4.14.0· 100% conf. F Oct 13, 2026
*************.com (WP 7.1.3) 4.12.4· 100% conf.HIGH1 vulnerability match F Oct 13, 2026
************.com (WP 7.1.3) 4.6.15· 100% conf.HIGH2 vulnerability matches D Oct 13, 2026
**********.com (WP 6.8.11) 4.14.0· 100% conf. D Oct 13, 2026
**************.fr (WP 6.4.13) 4.11.2· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
*********.de (WP 7.1.3) 4.13.6· 100% conf.HIGH1 vulnerability match F Oct 13, 2026
***************.net (WP 6.8.2) 4.8.11· 100% conf.HIGH2 vulnerability matches D Oct 13, 2026
***********.net (WP 6.8.2) 4.8.11· 60% conf.HIGH2 vulnerability matches F Oct 13, 2026
********.com (WP 7.1.3) 4.8.3· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
********.com.pl (WP 6.8.3) 4.11.7· 100% conf.HIGH2 vulnerability matches A Oct 13, 2026
***************************.com (WP 6.7.10) 2.6.0· 100% conf.HIGH4 vulnerability matches F Oct 13, 2026
********************.de (WP 7.0.2) 4.13.8· 100% conf.HIGH1 vulnerability match F Oct 13, 2026
**********.org (WP 7.0.2) 4.13.10· 60% conf.HIGH1 vulnerability match F Oct 13, 2026
*******.io (WP 7.1.3) 4.8.4· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
**************.org (WP 7.1.3) 4.14.0· 100% conf. — F Oct 13, 2026
******************.hu (WP 6.9.10) 3.9.4· 60% conf.HIGH4 vulnerability matches D Oct 13, 2026
***************.com (WP 7.1.3) 4.14.0· 100% conf. F Oct 13, 2026
**************.com (WP 7.1.3) 4.11.13· 100% conf.HIGH2 vulnerability matches D Oct 13, 2026
**********.fr (WP 7.1.3) 4.14.0· 100% conf. — F Oct 13, 2026
********.com (WP 5.8.18) 3.7.6· 100% conf.HIGH4 vulnerability matches F Oct 13, 2026
**************.com (WP 6.9.10) 4.12.3· 100% conf.HIGH2 vulnerability matches D Oct 13, 2026
**********************.com (WP 7.1.3) 4.11.18· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
********.com (WP 7.1.3) 4.11.10· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
*********.com (WP 6.7.10) 4.9.0· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
**********************.org (WP 7.1.3) 4.14.0· 100% conf. F Oct 13, 2026
*************.com (WP 6.5.3) 4.6.4· 100% conf.HIGH4 vulnerability matches F Oct 13, 2026
******************.com (WP 7.1.3) 4.6.8· 100% conf.HIGH3 vulnerability matches F Oct 13, 2026
*************.rs (WP 7.1.1) 4.14.0· 100% conf. F Oct 13, 2026
************.com (WP 7.0.7) 4.7.3· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
**********.com 4.14.0· 100% conf. C Oct 13, 2026
***************.com (WP 7.1.3) 4.14.0· 100% conf. F Oct 13, 2026
******.com (WP 6.8.11) 4.11.16· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
************.com (WP 7.1.3) 4.14.0· 100% conf. — F Oct 13, 2026
*****************.ca (WP 7.1) 4.13.11· 100% conf.HIGH1 vulnerability match D Oct 13, 2026
****.com (WP 7.0.7) 4.14.0· 100% conf. F Oct 13, 2026
*****.com (WP 7.1.3) 4.7.0· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
*****************.com (WP 7.1.3) 4.13.10· 100% conf.HIGH1 vulnerability match F Oct 13, 2026
*********.com.au (WP 7.1.3) 4.13.10· 100% conf.HIGH1 vulnerability match F Oct 13, 2026
********.com (WP 7.1.3) 4.14.0· 100% conf. F Oct 13, 2026
************.com (WP 7.1.3) 4.14.0· 100% conf. — C Oct 13, 2026
******************************.de (WP 6.3.2) 4.4.0· 60% conf.HIGH4 vulnerability matches F Oct 13, 2026
*******************.com (WP 7.1.3) 4.13.3· 100% conf.HIGH1 vulnerability match F Oct 13, 2026
***********.com (WP 7.0) 4.12.6· 100% conf.HIGH1 vulnerability match F Oct 13, 2026
*************.ca (WP 7.1.3) 4.6.16· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
***************.com (WP 7.1.3) 4.11.0· 100% conf.HIGH2 vulnerability matches D Oct 13, 2026
*********************.com (WP 6.8.11) 4.14.0· 100% conf. — F Oct 13, 2026
****.com (WP 6.2) 4.1.3· 100% conf.HIGH4 vulnerability matches F Oct 13, 2026
************.com (WP 7.1.3) 4.14.0· 100% conf. F Oct 13, 2026
******************.de (WP 7.1.3) 4.14.0· 100% conf. — F Oct 13, 2026
******************.es (WP 6.3.13) 2.1.3· 100% conf.HIGH4 vulnerability matches F Oct 13, 2026
*****************.com (WP 7.1.3) 4.8.1· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
*******.com (WP 7.1.3) 4.14.0· 100% conf. F Oct 13, 2026
*********.com (WP 7.1.3) 3.7.6· 60% conf.HIGH4 vulnerability matches D Oct 13, 2026
************.com (WP 7.1.3) 4.14.0· 100% conf. F Oct 13, 2026
****.hu (WP 7.1.3) 4.13.4· 100% conf.HIGH1 vulnerability match B Oct 13, 2026
*******************.org (WP 7.1.3) 4.14.0· 100% conf. — F Oct 13, 2026
***********.com (WP 7.1.2) 4.12.3· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
*************.com 4.11.13· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
***************.com (WP 7.1.2) 4.14.0· 100% conf. F Oct 13, 2026
***********.com 4.14.0· 100% conf. — C Oct 13, 2026
***************.com (WP 7.1.3) 4.6.16· 100% conf.HIGH2 vulnerability matches D Oct 13, 2026
*****.org.uk (WP 7.1.3) 4.11.5· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
***********.com 4.14.0· 100% conf. F Oct 13, 2026
**********.se (WP 7.1.3) 4.14.0· 100% conf. — F Oct 13, 2026
*********************.com (WP 6.9.4) 4.14.0· 100% conf. F Oct 13, 2026
******.com (WP 7.1.3) 4.11.13· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
***************.org (WP 7.1.3) 4.8.10· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
*******************.net (WP 7.1.2) 4.14.0· 100% conf. F Oct 13, 2026
***********.net (WP 7.1.3) 4.14.0· 100% conf. F Oct 13, 2026
***************.org (WP 7.1.3) 4.6.13· 100% conf.HIGH2 vulnerability matches F Oct 13, 2026
**************************.com (WP 6.8.11) 4.11.14· 100% conf.HIGH2 vulnerability matches D Oct 13, 2026
Copyright 2026, tldwp.com. All rights reserved. Data Use License · WordPress maintenance or security needs? Reach out!
WordPress is a trademark of the WordPress Foundation. TLDWP is an independent project and is not affiliated with or endorsed by the WordPress Foundation or the WordPress open source project.