Limited-Time Offer

Get Extra 20% off on FullCharge Yearly Plan — available for first 10 users only. Don’t miss out! 🚀

TrackWP

GD Security Headers · Version history

GD Security Headers changelog and version history

Latest version
1.9
May 12, 2026 (6 months ago)
Releases
13
since 2019
In the last year
1
Tested up to
WordPress 7.0.8
PHP 7.4 or later

Releases each year

  • 20194 releases
  • 20202 releases
  • 20211 release
  • 20222 releases
  • 20232 releases
  • 20241 release
  • 20261 release

20261 release

  1. GD Security Headers 1.9Latest

    • New: tested with WordPress up to 7.0
    • Edit: improved import data sanitization
    • Edit: improvements to the echo of escaped values
    • Edit: sanitize user_agent on input before storing it
    • Edit: d4pLib 2.8.20
    • Fix: XSS vulnerability via user_agent

20241 release

  1. GD Security Headers 1.8

    • New: system requirements: PHP 7.4 or newer
    • New: tested with WordPress 6.4 to 6.6
    • New: strict transport security: extra value for ‘preload’ flag
    • Edit: updated list of permissions policy elements
    • Edit: updated permissions policy, Browsing Topics replacing FLoC
    • Edit: added more information for some settings
    • Edit: changes to default values for some settings
    • Edit: d4pLib 2.8.17

20232 releases

  1. GD Security Headers 1.7.1

    • Edit: improvements to the CSP logs panel input processing
    • Edit: improvements to the CSP logs panel arguments sanitization
    • Edit: improvements to the log classes PHP code
    • Fix: union based SQL injection vulnerability with the CSP logs panel

  2. GD Security Headers 1.7

    • New: system requirements: PHP 7.3 or newer
    • New: tested with WordPress 6.0 to 6.3
    • Edit: various improvements to display escaping and sanitation
    • Edit: various improvements to the core code
    • Edit: d4pLib 2.8.15
    • Fix: reflected XSS vulnerability with error message handling

20222 releases

  1. GD Security Headers 1.6.1

    • New: tested with WordPress 6.0

  2. GD Security Headers 1.6

    • New: system requirements: PHP 7.2 or newer
    • New: system requirements: WordPress 5.3 or newer
    • New: tested with WordPress 5.9
    • New: csp addon: send reports to custom log URL
    • New: csp addon: support for ‘base-uri’ directive
    • New: csp addon: predefined rules list for Instagram
    • Edit: csp addon: updated various predefined rules lists
    • Edit: csp addon: updated settings information about some rules
    • Edit: d4pLib 2.8.14
    • Fix: csp addon: few typos in the rules names
    • Fix: csp addon: minor issues with saving settings

20211 release

  1. GD Security Headers 1.5

    • New: feature/permissions policy addon: support for ‘interest-cohort’
    • New: feature/permissions policy addon: dashboard information widget
    • Edit: feature/permissions policy addon: expanded information in the settings panel
    • Edit: feature/permissions policy addon: improved values explanations
    • Fix: feature/permissions policy addon: few typos in the rules names

20202 releases

  1. GD Security Headers 1.4

    • New: csp addon: generate predefined rules for one or more CDN’s
    • New: csp addon: predefined rules list for WordPress.org
    • New: csp addon: support for ‘prefetch-src’ directive
    • New: feature policy addon: support for updated ‘permission-policy’ version
    • New: feature policy addon: expanded list of policies that can be included
    • Edit: csp addon: improved settings organization showing CSP rule levels
    • Edit: feature policy addon: included support information for some policies
    • Edit: d4pLib 2.8.13
    • Fix: csp addon: problem with generating the rules with ‘all’ basic value
    • Fix: feature policy addon: few minor issues with building rules

  2. GD Security Headers 1.3

    • Edit: csp addon: expanded some of the google based preset rules
    • Edit: d4pLib 2.8.8
    • Fix: x-frame policy: invalid headers generated when not using .htaccess
    • Fix: strict-transport-security policy: invalid headers generated when not using .htaccess
    • Fix: referer policy: invalid headers generated when not using .htaccess
    • Fix: feature policy: problem printing empty policy header

20194 releases

  1. GD Security Headers 1.2

    • New: support for feature policy header
    • New: csp addon: predefined rules list for Google YouTube
    • New: csp addon: predefined rules list for Google Tag Manager
    • New: csp addon: predefined rules list for Gravatar
    • New: csp addon: predefined rules list for Gleam
    • New: csp addon: predefined rules list for Vimeo
    • New: csp addon: auto generated rules for some special data sources
    • Edit: csp addon: expanded some Google based preset rules
    • Edit: csp addon: various improvements in the generator
    • Edit: d4pLib 2.8.2

  2. GD Security Headers 1.1.1

    • Edit: d4pLib 2.7.6
    • Fix: problem with saving the plugin settings in some cases

  3. GD Security Headers 1.1

    • New: panel with generated headers for various servers
    • New: headers panel: for apache servers
    • New: headers panel: for nginx servers
    • New: headers panel: for iis servers
    • New: new method for building the HTACCESS headers
    • Edit: improved additional headers object
    • Edit: updated rules for Google Analytics
    • Edit: do not run when WordPress runs CRON
    • Edit: removed some unused code and strings

  4. GD Security Headers 1.0

    • First plugin version

Questions about GD Security Headers’s releases

What is the latest version of GD Security Headers?

1.9, released on May 12, 2026 (5 months ago). It’s tested up to WordPress 7.0.8 and needs PHP 7.4 or later.

How often is GD Security Headers updated?

One release in the last year. Its first release on WordPress.org dates from March 2019.

Know when your rivals ship

Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.

Start free

Release dates come from the day each version’s folder was made in GD Security Headers’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.