WordPress maintenance or security needs? Reach out!
TLDWP

Theme: staco (Used by 9 domains)

Security snapshot

Across 9 staco WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 0% Grade B 0% Grade C 0% Grade D 11% Grade F 89%
Fail the header check (F)89%vs 82.5% avg
Leak usernames22%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS100%vs 96.2% avg

What stands out

TLDWP currently associates 9 indexed WordPress sites with staco, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 22.2% versus 38.5% overall (-16.3 percentage points).

Header-grade F is 88.9% vs 82.5% overall (+6.4 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp); Sensitive-file exposure is 0% vs 1.8% overall (-1.8 pp).

These are observational associations among sites where TLDWP detected staco, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Where these sites live — top 2 domain endings
.ir 6
.com 3

staco Premium / Custom

This theme is not available on WordPress.org. It may be a premium theme, a custom theme, or a theme from a third-party marketplace.

DomainExposuresHeadersLast Checked
w*b*n*v*n.com (WP 7.1) F Sep 7, 2026
n*y*d.ir F Aug 28, 2026
a*o*7*.ir (WP 7.1) D Aug 22, 2026
s*a*t*p*l*n*.com F Aug 18, 2026
e*d*d*a*e*a*1*.ir (WP 7.0.2) F Jul 31, 2026
y*d*k*8.ir (WP 7.0.2) F Jul 31, 2026
s*n*n*a*5*.ir F Jul 31, 2026
m*l*y*r*8.ir (WP 7.0) F Jul 31, 2026
r*c*h*o*i*a*c*a*.com (WP 7.0.1) F Jul 17, 2026