Security snapshot
Across 13 carnival WordPress sites indexed by TLDWP, compared to the all-WordPress average.
What stands out
TLDWP currently associates 13 indexed WordPress sites with carnival, equivalent to 0% of the current WordPress dataset.
The largest measured difference is HTTPS adoption: 84.6% versus 96.2% overall (-11.6 percentage points).
Username enumeration is 46.2% vs 38.5% overall (+7.7 pp); Sensitive-file exposure is 7.7% vs 1.8% overall (+5.9 pp); Header-grade F is 84.6% vs 82.5% overall (+2.1 pp).
These are observational associations among sites where TLDWP detected carnival, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
carnival Premium / Custom
This theme is not available on WordPress.org. It may be a premium theme, a custom theme, or a theme from a third-party marketplace.
| Domain | Version | Exposures | Headers | Last Checked |
|---|---|---|---|---|
| z*o*.pl | — | F | Sep 10, 2026 | |
| s*w*n*w*a*t*e.org (WP 7.1) | — | F | Sep 8, 2026 | |
| y*l*a*b*r*y.com (WP 7.1) | — | C | Aug 31, 2026 | |
| w*o*i*g*a*l*y*r*l*a*u*.org (WP 7.1) | — | F | Aug 30, 2026 | |
| c*l*e*t*r*c*r*i*a*s*o*s.com | — | D | Aug 24, 2026 | |
| b*c*n*a*e*i*a*i*i.com | — | F | Aug 21, 2026 | |
| c*r*i*a*-*g.net | — | F | Aug 18, 2026 | |
| c*r*i*a*m*x*c*.com (WP 6.3.8) | — | F | Jul 30, 2026 | |
| c*r*i*a*m*e*i*g*.com (WP 6.8.1) | — | F | Jul 30, 2026 | |
| c*r*i*a*-*o*r*.com (WP 7.0.2) | — | F | Jul 30, 2026 | |
| d*o*e*9*4.fr (WP 7.0.2) | — | F | Jul 29, 2026 | |
| g*a*a.fr (WP 6.9.4) | — | F | Jul 28, 2026 | |
| l*d*h*z.ro (WP 6.9.4) | — | F | Jul 23, 2026 |