WordPress maintenance or security needs? Reach out!
TLDWP

Theme: xts-hitek (Used by 66 domains)

Security snapshot

Across 66 xts-hitek WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 8% Grade B 3% Grade C 0% Grade D 11% Grade F 79%
Fail the header check (F)79%vs 82.5% avg
Leak usernames26%vs 38.5% avg
Expose a sensitive file1.5%vs 1.8% avg
Use HTTPS94%vs 96.2% avg

What stands out

TLDWP currently associates 66 indexed WordPress sites with xts-hitek, equivalent to 0% of the current WordPress dataset.

The largest measured difference is username enumeration: 25.8% versus 38.5% overall (-12.7 percentage points).

Header-grade F is 78.8% vs 82.5% overall (-3.7 pp); HTTPS adoption is 93.9% vs 96.2% overall (-2.3 pp); Sensitive-file exposure is 1.5% vs 1.8% overall (-0.3 pp).

These are observational associations among sites where TLDWP detected xts-hitek, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

Where these sites live — top 10 domain endings
.com 53
.pl 3
.ir 2
.hu 2
.lk 1
.co.za 1
.eu 1
.co.il 1
.gr 1
.fr 1

xts-hitek Premium / Custom

This theme is not available on WordPress.org. It may be a premium theme, a custom theme, or a theme from a third-party marketplace.

DomainVersionExposuresHeadersLast Checked
c*e*n*o.fr 1.8.2· 100% conf. A Sep 10, 2026
d*g*1*2*.com 1.8.3· 100% conf. F Sep 9, 2026
w*n*c*.com (WP 6.5.2) F Sep 8, 2026
h*d*d*o.com (WP 7.1) F Sep 8, 2026
b*x*a*c*.com (WP 7.1) F Sep 7, 2026
k*m*-*n*u*t*i*.com (WP 7.1) F Sep 6, 2026
d*p*t*a*e*a.com F Sep 6, 2026
m*r*i*f*b*e*.com A Sep 2, 2026
b*o*n*c*.c*.il (WP 6.9.7) F Sep 1, 2026
a*s*a*i.com (WP 7.1) F Aug 31, 2026
t*c*o*o*i*g*.com (WP 7.1) F Aug 30, 2026
c*a*m*v*z.com A Aug 29, 2026
t*r*h*n.com (WP 7.1) D Aug 29, 2026
s*o*t*n*o*.com (WP 7.1) A Aug 29, 2026
b*z*r*p*r*h*.com (WP 6.7.7) F Aug 27, 2026
t*n*u*a*i*g*o*p.com (WP 7.1) D Aug 27, 2026
s*i*k*s*r*z.com F Aug 26, 2026
r*b*m*t*r*a*.gr (WP 7.1) F Aug 26, 2026
t*e*d*p*j*l*l*m*.com (WP 7.1) F Aug 25, 2026
a*o*m*r*e*.com (WP 7.1) F Aug 22, 2026
s*a*d*g*.com (WP 7.0.2) B Aug 22, 2026
m*d*l*o*c*.eu F Aug 21, 2026
a*i*t*s*o*.com F Aug 20, 2026
i*t*r*e*e*r*d*o*.hu (WP 7.1) F Aug 20, 2026
c*m*u*a*d.com (WP 7.1) F Aug 20, 2026
a*o*a*p*r*s.com F Aug 20, 2026
e*j*i*.ir (WP 6.4.10) F Aug 20, 2026
s*a*i*a*y*g*.com (WP 7.0.4) D Aug 19, 2026
l*o*a*a.ir F Aug 18, 2026
c*e*n*o.com A Aug 17, 2026
p*r*t*c*o*.com (WP 7.0.4) F Aug 17, 2026
m*g*s*n*u*o*s.com (WP 7.0.4) F Aug 17, 2026
v*h*d*a*a.com (WP 7.0.4) F Aug 17, 2026
m*b*x*l.com (WP 6.7.7) F Aug 16, 2026
t*e*v*t*.pl (WP 7.0.4) F Aug 15, 2026
c*i*k*.lk (WP 7.0.3) D Aug 9, 2026
o*k*a*d*o.com (WP 7.0.2) F Aug 2, 2026
m*-*i*k.com (WP 7.0.2) F Aug 1, 2026
m*c*a*e*.com (WP 7.0.2) F Jul 31, 2026
a*t*s*n*u*t*i*l*t*.com (WP 6.7.2) F Jul 31, 2026
p*r*e*o*d*.com F Jul 30, 2026
s*h*r*o*p.com (WP 7.0.2) D Jul 30, 2026
p*e*a*s.com D Jul 27, 2026
k*d*c*i*.com (WP 6.7.5) F Jul 26, 2026
a*i*e*e*t*o*i*s.com (WP 7.0.2) F Jul 26, 2026
a*i*e*e*t*o*i*.com (WP 7.0.2) F Jul 26, 2026
f*t*o*g*o*p.com (WP 7.0) F Jul 25, 2026
p*f*r*p*a*e*.com (WP 7.0.2) F Jul 25, 2026
s*l*m*d.pl (WP 7.0.2) F Jul 24, 2026
s*n*m*d*c*l.pl (WP 7.0.2) F Jul 24, 2026
i*a*a*t*r.com (WP 7.0.2) D Jul 24, 2026
f*k*a*r*.com (WP 6.9.1) F Jul 23, 2026
b*y*h*n*p*r*s.com (WP 7.0) F Jul 23, 2026
u*t*a*i*k.c*.za (WP 7.0.2) F Jul 22, 2026
h*f*a*.com F Jul 21, 2026
k*o*o*i*i*a*.com (WP 7.0.2) F Jul 21, 2026
u*e*t*h*p.com (WP 7.0.2) F Jul 21, 2026
b*d*r*a*e*.com (WP 6.8.3) F Jul 20, 2026
s*e*v*r.hu B Jul 20, 2026
r*b*m*t*r*a*.com (WP 7.0.2) F Jul 20, 2026
f*s*r*d.com (WP 7.0.2) F Jul 20, 2026
m*m*r*t*a*.com (WP 7.0.2) F Jul 19, 2026
t*r*i*h*q*a.com (WP 7.0.2) F Jul 19, 2026
k*a*a*i*h*f*f*.com (WP 6.8.6) F Jul 19, 2026
d*e*c*c*e*o*e*.com (WP 7.0.2) F Jul 19, 2026
z*p*l*x.com (WP 6.9.5) F Jul 19, 2026