HTTP Security Header · Security record
Is HTTP Security Header safe?
No known vulnerabilities are on record for HTTP Security Header.
Checked 2 days ago against the WPVulnerability database, for version 3.1.
How it’s looked after
- Last release
- Dec 30, 2025 (10 months ago)
- Releases in the last year
- 1
- Tested up to
- WordPress 6.9.11 (current: 7.1)
- Active installs
- 1K+
Known vulnerabilities
None on record for HTTP Security Header.
Questions about HTTP Security Header’s security
Is HTTP Security Header safe to use?
No known vulnerabilities are on record for HTTP Security Header. That isn’t a guarantee, so keep it updated like any plugin.
Does HTTP Security Header have known security vulnerabilities?
No. WPVulnerability’s database lists no known vulnerabilities for HTTP Security Header.
Is HTTP Security Header still maintained?
Its last release was 10 months ago. No support threads were opened in the last two months.
Is HTTP Security Header compatible with the latest WordPress?
HTTP Security Header’s readme says it’s tested up to WordPress 6.9.11, while the current version is 7.1. That doesn’t mean it breaks, but its author hasn’t confirmed it works with the latest releases.
Hear about the next one first
Track your plugin on TrackWP and get an alert when a new vulnerability affecting it is published. Every plan has it, the free Starter too; Boost and FullCharge email it at once.
Start freeVulnerability data from WPVulnerability (CC0), which gathers records from CVE, Wordfence, Patchstack and WPScan. A clean record isn’t a guarantee: keep every plugin updated.