WordPress maintenance or security needs? Reach out!
TLDWP

Theme: carna (Used by 7 domains)

Security snapshot

Across 7 carna WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 0% Grade C 14% Grade D 0% Grade F 86%
Fail the header check (F)86%vs 82.6% avg
Leak usernames71%vs 38.6% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS100%vs 96.3% avg

What stands out

TLDWP currently associates 7 indexed WordPress sites with carna, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 71.4% versus 38.6% overall (+32.8 percentage points).

HTTPS adoption is 100% vs 96.3% overall (+3.7 pp); Header-grade F is 85.7% vs 82.6% overall (+3.1 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).

These are observational associations among sites where TLDWP detected carna, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Where these sites live — top 3 domain endings
.com 5
.style 1
.ec 1

carna Premium / Custom

This theme is not available on WordPress.org. It may be a premium theme, a custom theme, or a theme from a third-party marketplace.

DomainVersionExposuresHeadersLast Checked
c*r*a.style F Sep 5, 2026
w*s*s*d*-*a*a*e.com (WP 6.2.11) F Aug 24, 2026
b*l*u*f*r*i*u*e.com (WP 7.1) F Aug 23, 2026
b*l*u*-*u*n*t*r*.com (WP 7.1) C Aug 23, 2026
s*b*l*a.ec (WP 7.0.4) F Aug 15, 2026
l*v*u*l*n*o*.com (WP 7.0.2) F Jul 23, 2026
h*k*d*n.com (WP 5.7.15) F Jul 20, 2026