Security snapshot
Across 21 candyweb WordPress sites indexed by TLDWP, compared to the all-WordPress average.
What stands out
TLDWP currently associates 21 indexed WordPress sites with candyweb, equivalent to 0% of the current WordPress dataset.
The largest measured difference is username enumeration: 23.8% versus 38.5% overall (-14.7 percentage points).
Header-grade F is 95.2% vs 82.5% overall (+12.7 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).
These are observational associations among sites where TLDWP detected candyweb, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
candyweb Premium / Custom
This theme is not available on WordPress.org. It may be a premium theme, a custom theme, or a theme from a third-party marketplace.
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| e*r*s*o*k*4.com | F | Sep 5, 2026 | |
| h*a*t*i*.com | F | Sep 4, 2026 | |
| q*m*i*t.com (WP 7.0.4) | F | Aug 27, 2026 | |
| q*m*i*t.hu (WP 7.0.4) | F | Aug 26, 2026 | |
| q*m*i*t.fr (WP 7.0.4) | F | Aug 26, 2026 | |
| q*m*i*t.cz (WP 7.0.4) | F | Aug 26, 2026 | |
| q*m*i*t.it (WP 7.0.4) | F | Aug 26, 2026 | |
| q*m*i*t.es (WP 7.0.4) | F | Aug 26, 2026 | |
| q*m*i*t.de (WP 7.0.4) | F | Aug 26, 2026 | |
| q*m*i*t.pl (WP 7.0.4) | F | Aug 26, 2026 | |
| z*r*w*k*r*y*c*.pl (WP 7.1) | F | Aug 25, 2026 | |
| a*r*l*m*t*.pl (WP 7.0) | F | Aug 24, 2026 | |
| d*a*z*e*i*o*o*r*e*.pl (WP 7.1) | F | Aug 24, 2026 | |
| s*a*.pl | D | Aug 15, 2026 | |
| d*b*e*-*d*o*a*.pl (WP 7.0.3) | F | Aug 14, 2026 | |
| d*m*a*y.pl | F | Aug 6, 2026 | |
| g*l*z*w*c*.pl | F | Aug 4, 2026 | |
| l*n*e.com | F | Jul 30, 2026 | |
| k*d*w*n*e*a*y*a*i*.pl (WP 7.0.2) | F | Jul 25, 2026 | |
| s*a*-*v.com | F | Jul 21, 2026 | |
| u*r*t*k*a*n*.pl (WP 7.0.1) | F | Jul 20, 2026 |