New audit

musclemeat.nl

Scanned Apr 5, 2026, 02:54 PM

Re-scan — Upgrade
97
A · Safe
25
Plugins Detected
22
Active Vulnerabilities
7
Outdated Plugins
0
Abandoned

Security Assessment

Key findings for musclemeat.nl

  • 22 active vulnerabilityies detected across 25 plugins.
  • 7 plugins are outdated and should be updated.
  • Security headers grade F — 4 important headers are missing.

WordPress

Version 6.0.11
Core installation

Active Theme

mm-theme
Up to date

Hosting Provider

Cloudflare
Infrastructure

Detected Plugins

25 total
PluginVulnerabilities
+3 more
Billink – Legacy
Billink – Legacy
high confidence
None found
PostNL for WooCommerce
PostNL for WooCommerce
high confidence
None found
14 vulnerabilityies found in 20 hidden plugins

Your full security report is ready

We found 25 plugins on this site. Unlock the complete analysis:

All 25 detected plugins
CVE details & patch status
Security header analysis
Exposed paths & TLS audit
DNS & email security
CT log subdomain discovery

One-time payment · Instant access · No subscription required

Security Posture

F
Security Headers
B
TLS/SSL
A
Exposed Paths
A
Email Security

Security Headers

17/100
Content-Security-Policy

No Content-Security-Policy header. Your site is more vulnerable to XSS attacks.

Strict-Transport-Security

No HSTS header. Browsers can be tricked into using insecure HTTP connections.

X-Frame-Options

No clickjacking protection. Your site can be embedded in malicious iframes.

3 more checks — unlock full report to see all

TLS/SSL Certificate

Issuer
WE1
Expires
40 days
Protocol
TLSv1.3
Wildcard
Yes

Exposed Paths & Login Security

0 exposed

No critical paths exposed. Unlock for the full breakdown.

DNS & Email Security

SPF

SPF record with hard fail (-all) — strong email authentication.

DMARC

DMARC policy is set to quarantine — good protection against spoofing.

DKIM

DKIM record found for selector "selector1". Email signatures can be verified.

Certificate Transparency

425 certificates found · 4 subdomains discovered

Infrastructure

Server Software

Server: cloudflare

X-Powered-By

X-Powered-By header is not exposed.

Web Application Firewall

Cloudflare WAF detected — provides additional protection against attacks.

WP Version Exposed

WordPress version 6.0.11 is exposed in the generator meta tag. Consider removing it.