wpscan.com
WPScan: WordPress Security Scanner
Last scanned Aug 4, 2026, 11:00 PM · 13 views
Overall score
Great
Summary
WPScan is an enterprise vulnerability database for WordPress. This website uses WordPress hosted on AUTOMATTIC - Automattic, Inc, US. SEO is good (80/100) and accessibility is excellent (100/100). Security scores good (85/100) and performance excellent (90/100). Top issue: Multiple H1 headings found.
WPScan is an enterprise vulnerability database for WordPress. Be the first to know about vulnerabilities affecting your WordPress core, plugins & themes.
- United States
- Hosted on AUTOMATTIC - Automattic, Inc, US
Top issues to fix
6 issues found · 1 high priority
Missing Content-Security-Policy header
SecurityAdd a CSP to control which sources can run scripts — the strongest single defense against XSS.
Missing X-Content-Type-Options header
SecurityAdd X-Content-Type-Options: nosniff to stop MIME-sniffing attacks.
1 cookie without Secure/HttpOnly flags
SecuritySet Secure and HttpOnly on session cookies so they can't leak over HTTP or be read by injected scripts.
Multiple H1 headings found
SEOKeep a single H1 per page and demote the others to H2/H3.
No structured data (JSON-LD) found
SEOAdd JSON-LD (Organization, Article, Product…) to become eligible for rich results.
sitemap.xml not found
SEOPublish an XML sitemap and reference it from robots.txt to speed up page discovery.
SEO
3 issue(s) found
Performance
867 ms
Security
HTTPS & header checks
Accessibility
0 issue(s) found
Score history
-2 overall since Jul 27, 2026
- Overall
- 88
- SEO
- 80
- Security
- 85
- Performance
- 90
- Accessibility
- 100
Organization
Company details published in this site's own structured data.
WPScan is an enterprise vulnerability database for WordPress. Be the first to know about vulnerabilities affecting your WordPress core, plugins & themes.
Contact
Email, phone, and address published on this site's own pages.
Meta tags
- Title
- WPScan: WordPress Security Scanner
- Description
- WPScan is an enterprise vulnerability database for WordPress. Be the first to know about vulnerabilities affecting your WordPress core, plugins & themes.
- Canonical
- https://wpscan.com/
- Language
- en
- Charset
- UTF-8
- Viewport
- width=device-width, initial-scale=1
- Robots meta
- max-image-preview:large
- Manifest
Technologies
Detected frameworks, languages, and tools.
Hosting & CDN
- Hosting provider
- AUTOMATTIC - Automattic, Inc, US
- CDN provider
- —
- IP address
- 192.0.78.25
- ASN
- AS2635 (AUTOMATTIC - Automattic, Inc, US)
DNS records
| Type | Value |
|---|---|
| A |
|
| AAAA | — |
| MX |
|
| TXT | — |
| NS |
|
| CAA | — |
| CNAME | — |
| IPv6 support | No |
TLS / SSL certificate
- Version
- TLS 1.3
- Issuer
- Google Trust Services
- Subject
- tls.automattic.com
- Valid from
- Jul 27, 2026
- Valid to
- Oct 25, 2026
- Days until expiry
- 81
- SAN domains
- tls.automattic.com, crescentmooneditorial.com, pseguide.com, sassystylist.com, whiskersandwine.club, winfreeworksmontana.com, wingafarms.com, wisskomm-kolleg.de, wordsbycoco.com, wordup.blog, wordy.blog, workingclassstudiesassociation.org, workplayeat.com, worte-wie-wald.blog, wotyproject.com, wpscan.com, writebrainleftbrain.com, writerbychance.com, wurtsboroairporthistory.com, www.crescentmooneditorial.com, www.pseguide.com, www.sassystylist.com, www.wbbblog.com, www.whiskersandwine.club, www.wordsbycoco.com, www.wordy.blog, www.workingclassstudiesassociation.org, www.workplayeat.com, www.workvacationrepeat.com, www.wotyproject.com, www.writeallnite.com, www.writebrainleftbrain.com, www.writerbychance.com, www.writingistranslation.net, www.zimbobaggins.com, www.zimssummerspot.com, zimbobaggins.com, zimssummerspot.com
Security headers
- Strict-Transport-SecurityEnabled
- Content-Security-PolicyMissing
- X-Frame-OptionsEnabled
- X-Content-Type-OptionsMissing
- Referrer-PolicyMissing
- Permissions-PolicyMissing
Compression: gzip · 1 cookie(s) observed
Content & assets
Headings
H1 2 · H2 3 · H3 4
Links
22 internal · 27 external · 0 broken
Images
25 total · 0 missing alt
Scripts / Styles
91 scripts · 13 stylesheets
JS / CSS size
215 KB · 332 KB
Page size
190 KB
Robots.txt & Sitemap
- robots.txt
- Found
- Disallow rules
- 10
- sitemap.xml
- Not found
- URLs in sitemap
- 0
SEO issues
- Multiple H1 headings found
- No structured data (JSON-LD) found
- sitemap.xml not found
Accessibility issues
No accessibility issues detected.
Scan details
- Requested URL
- https://wpscan.com
- Final URL
- https://wpscan.com
- HTTP status
- 200
- HTTP version
- HTTP/2
- Response time
- 864 ms
- HTML size
- 190 KB
- Redirect chain
- https://wpscan.com
See something wrong on this report? Request a correction
Related websites
Same technology stack
woocommerce.com
WooCommerce
woo.com
WooCommerce
schrodinger.com
Schrödinger - Physics-based Software Platform for Molecular Discovery & Design
configio.com
Event Management System | Configio
lyoncapitale.fr
Toute l'actualité de Lyon et de sa région - Lyon Capitale
domainkeskus.com
Osta verkkotunnus, Webhotelli, VPN | Domainkeskus
Same hosting provider
msd.com
MSD | Home
rightworks.com
Cloud hosting for accounting professionals | Rightworks
mediavalet.com
Enterprise Digital Asset Management | The Best DAM Software
parse.ly
Content Analytics Made Easy | Parse.ly
newtek.com
NewTek and Vizrt have now joined forces to become Vizrt - NewTek
adient.com
Home | Adient
Frequently asked questions
- What technology does wpscan.com use?
- wpscan.com is built with React, WordPress, WooCommerce, Google Analytics, Nginx.
- Is wpscan.com secure (HTTPS)?
- Yes. wpscan.com uses TLS 1.3 with a certificate issued by Google Trust Services, valid until Oct 25, 2026.
- Who hosts wpscan.com?
- wpscan.com is hosted on AUTOMATTIC - Automattic, Inc, US.
- What is wpscan.com's SEO score?
- wpscan.com scored 80/100 for SEO in the latest analysis (great).
- What is wpscan.com's overall website score?
- wpscan.com has an overall SiteGraph score of 88/100, combining SEO, performance, security, and accessibility.
- Has wpscan.com's score changed over time?
- wpscan.com's overall score has declined by 2 points (from 90 to 88) since Jul 27, 2026.
OpenGraph & Twitter Card
OpenGraph
Twitter Card