Security snapshot
Across 16 badjohnny WordPress sites indexed by TLDWP, compared to the all-WordPress average.
What stands out
TLDWP currently associates 16 indexed WordPress sites with badjohnny, equivalent to 0% of the current WordPress dataset.
The largest measured difference is username enumeration: 75% versus 38.6% overall (+36.4 percentage points).
Header-grade F is 93.8% vs 82.6% overall (+11.2 pp); HTTPS adoption is 87.5% vs 96.3% overall (-8.8 pp); Sensitive-file exposure is 6.3% vs 1.8% overall (+4.5 pp).
These are observational associations among sites where TLDWP detected badjohnny, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
BadJohnny
This theme is a redesigned version of Twenty Twelve theme which is created by the WordPress team.
| Domain | Version | Exposures | Headers | Last Checked |
|---|---|---|---|---|
| b*u*h*t*e*k*1*3*.de (WP 7.0.2) | 1.04· 100% conf. | F | Sep 10, 2026 | |
| d*a*o*d*s*.com (WP 7.0.4) | 1.04· 100% conf. | F | Sep 8, 2026 | |
| d*r*z*n*r*m*m*e*c*e*.com (WP 7.0.4) | — | F | Sep 7, 2026 | |
| d*n*i*w*l*s.com (WP 7.1) | — | F | Sep 5, 2026 | |
| m*h*o*d*s*a*l.com (WP 4.6.29) | — | F | Aug 25, 2026 | |
| g*o*g*e*t*r*v*r*d*y.com (WP 7.1) | — | F | Aug 23, 2026 | |
| y*-*u.tv (WP 5.1.19) | — | F | Aug 18, 2026 | |
| l*b*r*y*r*n*.net (WP 7.0.4) | — | F | Aug 14, 2026 | |
| c*n*e*v*t*v*h*m*n*s*s.o*g.uk (WP 7.0.2) | — | D | Aug 3, 2026 | |
| h*i*u*-*u*f*l*d*s*j*u*s.com (WP 4.5.33) | — | F | Aug 2, 2026 | |
| m*h*e*a*r*c*p.com (WP 7.0.2) | — | F | Jul 31, 2026 | |
| p*i*e*n*w*s*l*.com (WP 4.4.33) | — | F | Jul 31, 2026 | |
| s*r*d*l*p*r*n*i*g.com (WP 7.0.2) | — | F | Jul 25, 2026 | |
| t*e*o*t*e*t*e*s*u*i*.com (WP 7.0.2) | — | F | Jul 23, 2026 | |
| p*t*r*o*f*e*s*i*h.com (WP 5.2.21) | — | F | Jul 23, 2026 | |
| k*m*k.jp (WP 4.9.26) | — | F | Jul 21, 2026 |