Host Header Injection Fix
v3.8by Jeff Starr · updated 4 days ago
Sets custom headers for WP notification emails. Also fixes a security issue with WP versions < 5.5.
- Rank
- #9,400
- Down3 vs yesterday
- Active installs (est.)
- ≈ 454
- 400+ reported · High
- Total downloads
- 28K
- 28,038 all-time
- Rating
- 5.0/5
- 6 reviews
- Support resolved
- –
- 0 of 0 threads, last 2 months
Host Header Injection Fix at a glance
Host Header Injection Fix is a WordPress plugin by Jeff Starr with 400+ active installs, the #9,400 most popular plugin on WordPress.org. On a typical day it’s downloaded about 9 times, 13% more than the month before. It’s rated 5.0 out of 5 from 6 reviews. Version 3.8 came out on Nov 4, 2026 and is tested up to WordPress 7.2. It leads the 5 plugins tagged “injection”. It was first released in 2017.
Chart time range
Applies to every chart below. History from Oct 10, 2026, 30 days.
Downloads over time
Download stats214 downloads · the last 30 days
View as table
| Date | Host Header Injection Fix |
|---|---|
| Nov 2, 2026 | 16 |
| Nov 1, 2026 | 17 |
| Oct 31, 2026 | 12 |
| Oct 30, 2026 | 8 |
| Oct 29, 2026 | 9 |
| Oct 28, 2026 | 9 |
| Oct 27, 2026 | 10 |
| Oct 26, 2026 | 11 |
| Oct 25, 2026 | 5 |
| Oct 24, 2026 | 7 |
| Oct 23, 2026 | 7 |
| Oct 22, 2026 | 6 |
| Oct 21, 2026 | 8 |
| Oct 20, 2026 | 2 |
| Oct 19, 2026 | 10 |
| Oct 18, 2026 | 10 |
| Oct 17, 2026 | 8 |
| Oct 16, 2026 | 2 |
| Oct 15, 2026 | 9 |
| Oct 14, 2026 | 10 |
| Oct 13, 2026 | 9 |
| Oct 12, 2026 | 2 |
| Oct 11, 2026 | 17 |
| Oct 10, 2026 | 10 |
Unusual spikes are usually updates, not new installs.
Estimated installs
≈ 454 · -1.1% in the last 30 days
View as table
| Date | Estimated installs |
|---|---|
| Nov 9, 2026 | 454 |
| Nov 8, 2026 | 454 |
| Nov 7, 2026 | 454 |
| Nov 5, 2026 | 454 |
| Nov 4, 2026 | 453 |
| Nov 3, 2026 | 452 |
| Nov 2, 2026 | 453 |
| Nov 1, 2026 | 454 |
| Oct 31, 2026 | 455 |
| Oct 30, 2026 | 456 |
| Oct 29, 2026 | 450 |
| Oct 28, 2026 | 457 |
| Oct 27, 2026 | 459 |
Rank over time
#9,400 · down 41 in the last 30 days
View as table
| Date | Daily snapshot |
|---|---|
| Nov 9, 2026 | #9,400 |
| Nov 8, 2026 | #9,397 |
| Nov 7, 2026 | #9,391 |
| Nov 6, 2026 | #9,382 |
| Nov 5, 2026 | #9,377 |
| Nov 4, 2026 | #9,391 |
| Nov 3, 2026 | #9,404 |
| Nov 2, 2026 | #9,383 |
| Nov 1, 2026 | #9,376 |
| Oct 31, 2026 | #9,361 |
| Oct 30, 2026 | #9,361 |
| Oct 29, 2026 | #9,450 |
| Oct 28, 2026 | #9,366 |
| Oct 27, 2026 | #9,359 |
Growth %
Average -0.08% a day in the last 30 days
View as table
| Date | Growth |
|---|---|
| Nov 9, 2026 | 0.00% |
| Nov 8, 2026 | 0.00% |
| Nov 7, 2026 | 0.00% |
| Nov 5, 2026 | +0.22% |
| Nov 4, 2026 | +0.22% |
| Nov 3, 2026 | -0.22% |
| Nov 2, 2026 | -0.22% |
| Nov 1, 2026 | -0.22% |
| Oct 31, 2026 | -0.22% |
| Oct 30, 2026 | +1.33% |
| Oct 29, 2026 | -1.53% |
| Oct 28, 2026 | -0.44% |
Active installs band
400+ on WordPress.org
View as table
| Date | Daily snapshot |
|---|---|
| Nov 9, 2026 | 400+ |
| Nov 8, 2026 | 400+ |
| Nov 7, 2026 | 400+ |
| Nov 6, 2026 | 400+ |
| Nov 5, 2026 | 400+ |
| Nov 4, 2026 | 400+ |
| Nov 3, 2026 | 400+ |
| Nov 2, 2026 | 400+ |
| Nov 1, 2026 | 400+ |
| Oct 31, 2026 | 400+ |
| Oct 30, 2026 | 400+ |
| Oct 29, 2026 | 400+ |
| Oct 28, 2026 | 400+ |
| Oct 27, 2026 | 400+ |
Search rankings
Where it appears in WordPress.org search for the searches you track, checked every day.
See where Host Header Injection Fix ranks in search
Track this plugin to check its position for the searches you choose, daily, with an alert when it moves.
Change log
From our daily snapshot of WordPress.org- So far:Rank #9391 → #9400
- Tested up to 7.1.4 → 7.2
- Released 3.8 (was 3.7)
- Rank #9366 → #9377
- Tested up to 7.1.3 → 7.1.4
Versions in use
Share of active installs on each published version, from WordPress.org.
- v3.737%
- v3.834%
- v3.38.8%
- v3.65.6%
- Other15%
Rating trend
5.0★★★★★6 reviews · steady in the last 30 days
Requirements & info
Version history- Version
- 3.8
- Requires WordPress
- 4.7
- Tested up to
- 7.2
- Requires PHP
- 5.6.20
- First released
- Nov 6, 2017
- Last updated
- Nov 4, 2026
- Releases, last 12 months
- …
Questions about Host Header Injection Fix
How many websites use Host Header Injection Fix?
Host Header Injection Fix is active on 400+ WordPress sites, as WordPress.org reports it. WordPress.org rounds the number down, so the real count is somewhat higher. That makes it the #9,400 most popular plugin on WordPress.org.
How many times has Host Header Injection Fix been downloaded?
28,038 times in total since 2017. On a typical day it’s downloaded about 9 times. See download stats
When was Host Header Injection Fix last updated?
Version 3.8 came out on Nov 4, 2026 (4 days ago).
Is Host Header Injection Fix compatible with the latest WordPress?
Yes. It’s tested up to WordPress 7.2, ahead of the current 7.1.
Is Host Header Injection Fix still maintained?
Yes. Its last release was 4 days ago. No support threads were opened in the last two months.
What rating does Host Header Injection Fix have?
5.0 out of 5 from 6 reviews on WordPress.org. 100% of them give 5 stars.
What are the best alternatives to Host Header Injection Fix?
The plugins most like Host Header Injection Fix, by the tags they share, are Manage Notification E-mails (100K+), WP Hide & Security Enhancer (50K+) and Customize WordPress Emails and Alerts (30K+). Compare all alternatives
Latest reviews
Analyze reviewsReview stats
5.0
★★★★★
6 reviews
- 5 stars: 6 reviews, 100%
- 4 stars: 0 reviews, 0%
- 3 stars: 0 reviews, 0%
- 2 stars: 0 reviews, 0%
- 1 stars: 0 reviews, 0%
- Positive
- 100%4–5★
- Mixed
- 0%3★
- Critical
- 0%1–2★
Compare with competitors
Add up to 1 competitor. No account needed.
| Metric | |
|---|---|
| Estimated installs | ≈ 454 |
| Reported installs | 400+ |
| Rating | 5.0 |
| Reviews | 6 |
| Total downloads | 28K |
| Author | Jeff Starr |
| First released | Nov 6, 2017 |
| Version | 3.8 |
| Requires WP | 4.7 |
| Requires PHP | 5.6.20 |
| Last updated | Nov 4, 2026 |
Alternatives to Host Header Injection Fix
Compare all alternativesPopular plugins with the same tags, the most in common first.

Manage Notification E-mails
by 3D Virge
Enable and disable email notifications that WordPress sends to the admin and user. Works perfectly with many other plugins!
- Rank
- #413
- Installs
- 100K+
- 4.8

WP Hide & Security Enhancer
by nsp-code
Protect your website by concealing vulnerable WordPress traces, plugins, themes, login/admin url. 2FA, Captcha, Firewall, Security Headers etc.
- Rank
- #759
- Installs
- 50K+
- 4.3
Customize WordPress Emails and Alerts
by Jack - BNFW
Supercharge your WordPress email notifications using a WYSIWYG editor and shortcodes. Default and new notifications available. Add-ons available.
- Rank
- #1,046
- Installs
- 30K+
- 4.8

Disable auto-update Email Notifications
by Elvis Nyakangi
This plugin performs a simple task of disabling email notifications that are sent by WordPress when a plugin or theme auto-updates.
- Rank
- #1,026
- Installs
- 30K+
- 4.5
Wordfence Security
by Mark Maunder
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.
- Rank
- #11
- Installs
- 5M+
- 4.7

WP Mail SMTP by WPForms
by Syed Balkhi
Make email delivery easy for WordPress. Connect with SMTP, Gmail, Brevo, SendGrid, Amazon SES + more, with powerful WordPress SMTP Email plugin.
- Rank
- #12
- Installs
- 4M+
- 4.8
Side by side:Host Header Injection Fix vs Manage Notification E-mailsHost Header Injection Fix vs WP Hide & Security EnhancerHost Header Injection Fix vs Customize WordPress Emails and Alerts
More by Jeff Starr
See everything by Jeff StarrOther plugins from this author in our catalog.

Disable Gutenberg
by Jeff Starr
Disable Gutenberg Block Editor and restore the Classic Editor and original Edit Post screen (TinyMCE, meta boxes, etc.).
- Rank
- #116
- Installs
- 500K+
- 5.0

GA Google Analytics
by Jeff Starr
Adds Google Analytics tracking code to your WordPress site. Supports many tracking features.
- Rank
- #151
- Installs
- 400K+
- 4.9

BBQ Firewall
by Jeff Starr
The fastest firewall plugin for WordPress. Protect against a wide range of threats with minimal performance impact.
- Rank
- #346
- Installs
- 100K+
- 4.9

Disable WP REST API
by Jeff Starr
Disables the WP REST API for visitors not logged into WordPress.
- Rank
- #966
- Installs
- 30K+
- 4.8

Blackhole for Bad Bots
by Jeff Starr
Blackhole is a WordPress security plugin that detects and traps bad bots in a virtual black hole, where they are denied access to your entire site.
- Rank
- #1,042
- Installs
- 30K+
- 4.7

User Submitted Posts
by Jeff Starr
Enable visitors to submit posts and images from the front-end of your site. Many features including anti-spam security, content restriction, and more.
- Rank
- #1,545
- Installs
- 10K+
- 4.8