HTTP Security Header · Version history
HTTP Security Header changelog and version history
- Latest version
- 3.1
- Dec 30, 2025 (10 months ago)
- Releases
- 8
- since 2024
- In the last year
- 1
- Tested up to
- WordPress 6.9.11
- PHP 7.0 or later
Releases each year
- 20245 releases
- 20253 releases
20253 releases
HTTP Security Header 3.1Latest
- NEW: Real-time validation for custom headers with fallback + admin warnings
- NEW: “Disable All Headers” button in settings UI
- NEW: Reset-to-default activates only important headers
- Improved validation logic for Permissions-Policy, CSP, and Expect-CT
- Refined translations and I18N compliance
HTTP Security Header 3.0
- Added support for Cross-Origin-Embedder-Policy (COEP)
- Refactored header application with auto-fallback and validation
- Introduced full nonce protection and security hardening
- Enhanced admin UI with tooltips and mobile-first design
- Introduced reset-to-defaults architecture
- Removed .htaccess dependency
HTTP Security Header 2.2
- Merged Feature-Policy with Permissions-Policy
- Improved .htaccess logic
- Enhanced CSP formatting
20245 releases
HTTP Security Header 2.1
- Added COOP and CORP headers
- Improved UI layout and validation
HTTP Security Header 2.0.3
- UI improvements and compatibility fixes
HTTP Security Header 2.0.2
HTTP Security Header 2.0.1
HTTP Security Header 2.0
- Major refactor with modular header handling
Questions about HTTP Security Header’s releases
What is the latest version of HTTP Security Header?
3.1, released on Dec 30, 2025 (10 months ago). It’s tested up to WordPress 6.9.11 and needs PHP 7.0 or later.
How often is HTTP Security Header updated?
One release in the last year. Its first release on WordPress.org dates from November 2024.
Know when your rivals ship
Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.
Start freeRelease dates come from the day each version’s folder was made in HTTP Security Header’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.