Best clickjacking plugins for WordPress
The most popular clickjacking plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. Headers Security Advanced & HSTS WP leads with 90K+ active installs, ahead of WP Anti-Clickjack (3K+) and HTTP Security Header (1K+). All 8 plugins tagged “clickjacking” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 8 clickjacking plugins
- 1.
Headers Security Advanced & HSTS WPThe most installed clickjacking plugin, with 90K+ active installs. Rated 4.9 from 79 reviews, updated 1 week ago.
- 2.
WP Anti-Clickjack3K+ active installs. Only 3 reviews so far, updated 3 weeks ago.
- 3.
HTTP Security Header1K+ active installs. Only 3 reviews so far, updated 10 months ago. Tested only up to WordPress 6.9.11.
- 4.
Do Not Iframe Me10+ active installs. No reviews yet, last updated 13 years ago. Tested only up to WordPress 3.5.2.
- 5.
iframe KillerFewer than 10 active installs. No reviews yet, last updated 9 years ago. Tested only up to WordPress 4.7.39.
- 6.
360 Orbit Header SecurityFewer than 10 active installs. No reviews yet, updated 2 weeks ago.
- 7.
Codo Content Security PolicyFewer than 10 active installs. No reviews yet, updated 1 day ago.
- 8.
JM Website Security HardeningFewer than 10 active installs. No reviews yet, updated 2 days ago.
All 8 plugins tagged “clickjacking”
Headers Security Advanced & HSTS WP
#479by Andrea Ferro9 days ago
Best all-in-one WordPress security plugin, uses HTTP & HSTS response headers to avoid vulnerabilities: XSS, injection, clickjacking. Force HTTP/HTTPS.
- Installs
- 90K+
- Rating
- 4.9(79)
- Downloads
- 1.3K/day
WP Anti-Clickjack
Down in the last 7 days:2#3,619by Andy Feliciotti26 days ago
Protect your WordPress site from clickjacking with X-Frame-Options and CSP frame-ancestors headers plus a frame breaking script.
- Installs
- 3K+
- Rating
- 5.0(3)
- Downloads
- 74/day
HTTP Security Header
#5,422by MOHIT GOYAL10 months ago
Add and manage essential HTTP security headers with ease. Protect your WordPress site from XSS, clickjacking, and other common vulnerabilities.
- Installs
- 1K+
- Rating
- 5.0(3)
- Downloads
- 17/day
Do Not Iframe Me
Up in the last 7 days:3,181#41,538by Jesse Lee13 years ago
Do Not Iframe My Wordpress Site
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
iframe Killer
Up in the last 7 days:22,379#50,315by jitengaikwad9 years ago
Restrict your website to open in iframe from external website.
- Installs
- <10
- Rating
- –
- Downloads
- 6/day
360 Orbit Header Security
Up in the last 7 days:16,508#56,278by Jörg Liwa17 days ago
Sets modern HTTP security headers (HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy and more) with a one-click quickstart and clear options.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Codo Content Security Policy
#56,926by Codo Digital Ltd1 day ago
Just Content-Security-Policy, not a security suite. Starts in Report-Only, with draft policies, built-in violation reports and page scanning.
- Installs
- <10
- Rating
- –
- Downloads
- 123/day
JM Website Security Hardening
#69,502by Jose Mortellaro2 days ago
Decide what your site may load and who may use its files. Security headers are written for you.
- Installs
- <10
- Rating
- –
- Downloads
- 44/day