WordPress maintenance or security needs? Reach out!
TLDWP

Theme: avato (Used by 7 domains)

Security snapshot

Across 7 avato WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Security metrics currently cover 8 matching records in the cached metrics snapshot.

Grade A 0% Grade B 0% Grade C 0% Grade D 25% Grade F 75%
Fail the header check (F)75%vs 82.5% avg
Leak usernames38%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS100%vs 96.2% avg

What stands out

TLDWP currently associates 7 indexed WordPress sites with avato, equivalent to 0% of the current WordPress dataset.

The largest measured difference is header-grade F: 75% versus 82.5% overall (-7.5 percentage points).

HTTPS adoption is 100% vs 96.2% overall (+3.8 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp); Username enumeration is 37.5% vs 38.5% overall (-1 pp).

These are observational associations among sites where TLDWP detected avato, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Where these sites live — top 3 domain endings
.com 5
.ca 2
.co 1

avato Premium / Custom

This theme is not available on WordPress.org. It may be a premium theme, a custom theme, or a theme from a third-party marketplace.

DomainVersionExposuresHeadersLast Checked
z*n*n*e*o.com (WP 7.1) 1.05· 60% conf. F Sep 10, 2026
a*a*o.co (WP 6.1.7) F Sep 6, 2026
a*r*p*c*h*.com (WP 6.9.1) F Aug 22, 2026
c*a*f*e*d*l*i*g*c*o*l.com (WP 7.1) F Aug 21, 2026
m*l*e*n*u*a*i*t*o*.ca (WP 7.1) D Aug 21, 2026
a*r*s*r*t*.com (WP 6.9) D Aug 17, 2026
p*s*i*n*e*i*o*t*r*.com (WP 7.0.4) F Aug 15, 2026
c*r*w*l*a*i*t*o*.ca (WP 7.0.2) F Jul 28, 2026