WordPress maintenance or security needs? Reach out!
TLDWP

Theme: twentytwentyfour (Used by 50,851 domains)

Security snapshot

Across 50,851 twentytwentyfour WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 1% Grade B 1% Grade C 4% Grade D 19% Grade F 75%
Fail the header check (F)75%vs 82.5% avg
Leak usernames48%vs 38.5% avg
Expose a sensitive file1.1%vs 1.8% avg
Use HTTPS97%vs 96.2% avg

What stands out

TLDWP currently associates 50,851 indexed WordPress sites with twentytwentyfour, equivalent to 0.7% of the current WordPress dataset.

The largest measured difference is username enumeration: 48.1% versus 38.5% overall (+9.6 percentage points).

Header-grade F is 75.1% vs 82.5% overall (-7.4 pp); HTTPS adoption is 97.4% vs 96.2% overall (+1.2 pp); Sensitive-file exposure is 1.1% vs 1.8% overall (-0.7 pp).

These are observational associations among sites where TLDWP detected twentytwentyfour, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Infrastructure patterns

Infrastructure detected alongside twentytwentyfour. Percentages are within sites where that specific signal was detectable; the baseline compares the same signal across detected WordPress sites overall.

PHP versions 487 detected · 1% coverage
8.3 28.5% 1.39× baseline 8.2 24% 1.85× baseline 7.4 13.3% 0.51× baseline
Web servers 3,653 detected · 7.1% coverage
cloudflare 33.6% 1.11× baseline Apache 32.5% 1.05× baseline nginx 24.9% 0.93× baseline
CDNs / WAFs 1,261 detected · 2.5% coverage
Cloudflare 98.2% 1.05× baseline Fastly 1.3% 0.27× baseline
Hosting networks 3,280 detected · 6.4% coverage
Cloudflare, Inc. 29.2% 1.21× baseline Oracle Corporation 11.9% 1.29× baseline IONOS SE 7.4% 1.25× baseline

Co-occurrence describes technologies observed on the same sites. Detection coverage varies by signal, and an association does not imply that one technology caused or selected another.

Similar security profiles

Closest among widely detected themes by average difference across header-grade F, username enumeration, exposed-file, and HTTPS rates.

blocksy 49,260 sites 1.6 pp avg difference kadence 77,157 sites 2.7 pp avg difference generatepress 111,567 sites 3.2 pp avg difference twentytwentyone 29,107 sites 3.4 pp avg difference

Profile similarity reflects these four observed rates only; it does not imply a technical relationship, shared ownership, or causation.

Explore more TLDWP data: Themes Plugins PHP versions Servers CDNs / WAFs
Where these sites live — top 20 domain endings
.com 40,664
.org 1,424
.de 1,350
.net 967
.fr 622
.us 592
.co.uk 319
.nl 287
.pl 256
.uk 201
.ca 188
.ch 187
.eu 178
.cz 175
.ru 141
.es 135
.com.br 122
.it 108
.fi 107
.com.au 103

Twenty Twenty-Four

👤 WordPress.org the WordPress team 🔗 Theme Homepage

Twenty Twenty-Four is designed to be flexible, versatile and applicable to any website. Its collection of templates and patterns tailor to different needs, such as presenting a business, blogging and writing or showcasing work. A multitude of possibilities open up with just a few adjustments to color and typography.…

View on WordPress.org →
Info last updated: Apr 14, 2026. Theme usage stats across domains updated daily:
DomainExposuresHeadersLast Checked
v*r*l.ee (WP 7.1) F Sep 9, 2026
y*g*m*c*a*h*n*.com (WP 7.1) F Sep 9, 2026
o*e*o*h*a*o*d*s*.com (WP 6.6.5) F Sep 9, 2026
f*b*a*o*m*r*m.com (WP 7.1) F Sep 9, 2026
r*g*e*i*s*s.com F Sep 9, 2026
f*b*a*g*b*r*.com (WP 6.9) F Sep 9, 2026
a*t*n*o*u*l*n.com (WP 7.1) D Sep 9, 2026
k*o*e*i*o.com (WP 7.1) F Sep 9, 2026
k*m*e*v*c*s.com (WP 7.1) F Sep 9, 2026
b*e*t*o*d*m*t*l.com (WP 7.1) F Sep 9, 2026
s*a*e*n*t*d*.com (WP 7.1) F Sep 9, 2026
t*i*u*c*i*.vn (WP 7.1) F Sep 9, 2026
d*o*e*.com (WP 7.1) D Sep 9, 2026
b*e*t*u*o.com (WP 6.6.6) F Sep 9, 2026
k*l*a*d*o.com (WP 7.1) F Sep 9, 2026
d*a*y*n*m*t*o*.com (WP 6.5.10) F Sep 9, 2026
a*t*n*o*a*a*d*a.com (WP 6.9) F Sep 9, 2026
s*a*e*i*r*s*.com (WP 7.0.4) F Sep 9, 2026
b*s*d*o*i.c*.il (WP 7.1) F Sep 9, 2026
d*n*t.com (WP 7.1) F Sep 9, 2026
c*r*s*u*t*r.c*.nz (WP 7.0.3) B Sep 9, 2026
s*a*e*u*i*d*s*r*e*.com (WP 7.1) F Sep 9, 2026
b*e*t*a*n*r*l*c*r*c.com (WP 7.1) C Sep 9, 2026
b*e*t*a*t*y.com (WP 7.1) C Sep 9, 2026
b*e*t*a*y.com (WP 6.9.7) F Sep 9, 2026
d*n*k*l*c.com F Sep 9, 2026
k*i*l*o*n*x*.com (WP 7.1) F Sep 9, 2026
s*a*e*n*e*l*g*n*r*n.com (WP 7.1) F Sep 9, 2026
k*i*d*e*u.com (WP 7.1) F Sep 9, 2026
r*f*t*.com (WP 7.1) F Sep 9, 2026
o*e*h*p*e*s.com (WP 7.1) F Sep 9, 2026
e*o*c*.cz (WP 7.1) F Sep 9, 2026
k*l*l*n*m*c.com (WP 7.1) F Sep 9, 2026
b*e*s*l*m*c.com (WP 7.1) F Sep 9, 2026
h*s*i*a*i*y*r*h*t*c*s.net (WP 7.1) F Sep 9, 2026
a*s*-*b.com (WP 7.1) F Sep 9, 2026
f*w*h*b.com (WP 7.1) F Sep 9, 2026
k*g*d*i*o*.com (WP 7.1) F Sep 9, 2026
s*a*e*o*h*.com (WP 7.1) C Sep 9, 2026
t*y*t*n*a*l*y.com (WP 6.8.8) F Sep 9, 2026
c*r*s*a*g*.net (WP 7.1) F Sep 9, 2026
k*l*e*m*r*e*a*o*a*d*p*.com F Sep 9, 2026
m*s*s*a*n*e*m*l*e*.de (WP 7.1) F Sep 9, 2026
m*e*a*g*d*.com (WP 7.1) F Sep 9, 2026
d*a*i*d*l*e*e*r*n*.com (WP 7.1) F Sep 9, 2026
c*o*h.day (WP 6.7.1) F Sep 9, 2026
n*a*u*i*.fr (WP 7.1) F Sep 9, 2026
r*f*r*f*k*y*.com (WP 6.8.8) F Sep 9, 2026
y*p*a*u*s.com (WP 7.0.4) A Sep 9, 2026
k*c*n*r*c*.com (WP 7.1) F Sep 9, 2026
h*n*i*r*.com (WP 7.1) F Sep 9, 2026
k*l*e*c*a*s*f*e*s.com (WP 7.1) F Sep 9, 2026
b*e*d*l*.com (WP 7.1) F Sep 9, 2026
d*h*u*g.com (WP 7.0.2) F Sep 9, 2026
r*e*v*l*c*u*s*l*n*.com (WP 7.1) F Sep 9, 2026
d*g*o*e*s*u*.com (WP 6.5.3) F Sep 9, 2026
f*s*e*c*n*e*t*a*.com (WP 7.0.4) C Sep 9, 2026
r*e*c*.com (WP 7.1) B Sep 9, 2026
a*t*i*e*o*e*.com (WP 7.1) F Sep 9, 2026
s*a*e*d*e*d*m.com (WP 6.6.4) F Sep 9, 2026
b*e*d*n*c*r*a*.com (WP 7.1) F Sep 9, 2026
s*a*e*s*l*r.com (WP 7.1) F Sep 9, 2026
s*a*e*4*t*c*.com D Sep 9, 2026
d*a*t*f*l*.com (WP 6.7.7) F Sep 9, 2026
k*l*e*e*.com (WP 6.8.3) C Sep 9, 2026
b*e*d*n*a*r*.com (WP 7.1) F Sep 9, 2026
o*e*l*s*v.com (WP 7.0.4) F Sep 9, 2026
r*e*d*c*p*c*t*c*o*.com (WP 7.1) F Sep 9, 2026
f*n*a*i*n*o*e*t*h*s*a*i*.org (WP 6.9.7) F Sep 9, 2026
s*a*e*m*r*e*-*y*a*i*s.com (WP 6.9.7) D Sep 9, 2026
s*a*e*l*o*.com (WP 6.9.7) F Sep 9, 2026
b*e*d*c*t*r*l*.com (WP 6.9.4) F Sep 9, 2026
s*a*e*c*r*i*a*.com (WP 7.1) F Sep 9, 2026
b*t*u*d*u*s*h*a*d.com D Sep 9, 2026
d*e*c*s*n*u*.com D Sep 9, 2026
s*i*i*h*c*s*n*l*t*i*.com D Sep 9, 2026
a*u*i*g*r*e*e.com D Sep 9, 2026
v*k*n*l*c*p*l*k*.com D Sep 9, 2026
b*t*a*l*o*a*i*.com D Sep 9, 2026
b*t*i*t*w*t*e*l*n*.com D Sep 9, 2026
c*s*n*l*d*n*a*k.com D Sep 9, 2026
s*i*i*h*c*s*n*a*s*r*l*a.com D Sep 9, 2026
a*t*e*s*e*.com (WP 7.0.4) F Sep 9, 2026
l*n*b*t*s*e*r*i*h.com D Sep 9, 2026
m*t*l*g*c*o*a.it C Sep 9, 2026
d*d*n*r*y.com (WP 7.1) F Sep 9, 2026
f*a*e*t.com (WP 7.1) D Sep 9, 2026
r*e*m*n*o*f.com (WP 6.8.8) F Sep 9, 2026
d*h*p.de (WP 7.1) F Sep 9, 2026
a*u*u*u*.nl (WP 7.1) A Sep 9, 2026
a*t*x*n*i*i*i*t*v*.com (WP 7.1) F Sep 9, 2026
r*p*i*c*f*-*a*s*n*e.ch (WP 7.1) F Sep 9, 2026
s*a*s*c*a*o*.com (WP 7.1) F Sep 9, 2026
i*m*n*e*r*j.dev (WP 7.1) B Sep 9, 2026
f*r*b*l*e*e*e.com (WP 6.6.7) D Sep 9, 2026
h*m*r*g*m*s.com (WP 7.1) F Sep 9, 2026
s*5*0*u*.com (WP 7.1) F Sep 9, 2026
y*s*o*c*n*l*.com (WP 6.8.3) C Sep 9, 2026
a*t*s*y*a*e.com (WP 7.1) F Sep 9, 2026
r*d*n*w*t*t*e*e*t.com — Sep 9, 2026
Copyright 2026, tldwp.com. All rights reserved. Data Use License · WordPress maintenance or security needs? Reach out!