Limited-Time Offer

Get Extra 20% off on FullCharge Yearly Plan — available for first 10 users only. Don’t miss out! 🚀

TrackWP

WP Anti-Clickjack · Version history

WP Anti-Clickjack changelog and version history

Latest version
1.9.0
Oct 13, 2026 (27 days ago)
Releases
29
since 2015
In the last year
4
about one every 91 days
Tested up to
WordPress 7.1.4
PHP 7.0 or later

Releases each year

  • 20152 releases
  • 20171 release
  • 20182 releases
  • 20193 releases
  • 20203 releases
  • 20215 releases
  • 20223 releases
  • 20235 releases
  • 20241 release
  • 20264 releases

20264 releases

  1. WP Anti-Clickjack 1.9.0Latest

    • New: let sites you choose frame your site with the wp_anti_clickjack_allowed_origins filter (added to the frame-ancestors policy and allowed by the frame breaking script)
    • New: Settings > Anti-Clickjack screen to allow sites to frame yours without code, with a preview of the headers your pages send
    • New: Site Health check that loads your homepage like a visitor and warns when the headers are missing, duplicated or conflicting
    • New: “Check from outside” button (Site Health and settings) that has ClickJack Test load your homepage from the internet and shows what your CDN or proxy serves
    • New: “Settings” and “Test your site” links on the Plugins screen
    • Fixed: no longer replaces a stricter X-Frame-Options: DENY (or any framing header) your server or another plugin already sends
    • Fixed: page builders and previews work when the WordPress admin runs on a different domain than the site
    • Fixed: framing headers that other plugins send later in the same request are now seen and kept
    • Fixed: the frame breaking script is skipped on AMP pages, where custom scripts aren’t allowed
    • Tested up to WordPress 7.1
    • Fixed: no longer replaces a Content-Security-Policy that your site or another plugin already sends
    • Fixed: WordPress post embeds can be shown on other sites again
    • Fixed: the wp_anti_clickjack_x_frame_options_header filter now works from your theme’s functions.php
    • Fixed: returning false from the wp_anti_clickjack filter now turns the script off for every visitor, including visitors arriving from other sites
    • Security: page builder preview parameters now skip the script only for logged-in users who can edit posts
    • Sends Content-Security-Policy: frame-ancestors 'self' alongside X-Frame-Options on every supported WordPress version
    • The script now prints through the WordPress inline script API, so Content-Security-Policy plugins can add a nonce to it
    • Code cleanup for WordPress coding standards

  2. WP Anti-Clickjack 1.8.0

    • Tested up to WordPress 6.9
    • Added support for Bricks Builder
    • Added support for Breakdance Builder
    • Added support for Oxygen Builder
    • Added support for Spectra / Starter Templates
    • Added support for Gutenberg Full Site Editor (FSE)
    • Fixed bug with referrer host comparison logic
    • Fixed PHP 8+ compatibility issue with parse_url() error handling
    • Fixed JavaScript cross-origin exception when framed by attacker sites
    • Removed deprecated language attribute from script tag

  3. WP Anti-Clickjack 1.8

  4. WP Anti-Clickjack 1.7.9

    • Tested up to WordPress 6.5

20241 release

  1. WP Anti-Clickjack 1.7.8

    • Bug fixes for same origin requests

20235 releases

  1. WP Anti-Clickjack 1.7.7

    • Tested up to WordPress 6.3
    • Bug fix for Elementor Pro site editor

  2. WP Anti-Clickjack 1.7.6

    • Tested up to WordPress 6.2
    • PHP warning bug fix

  3. WP Anti-Clickjack 1.7.5

    • Added support for Avada builder

  4. WP Anti-Clickjack 1.7.4

    • Tested up to WordPress 6.1

  5. WP Anti-Clickjack 1.7.3

    • Tested up to WordPress 6.0
    • Bug fix when using the WP customizer and editing widgets

20223 releases

  1. WP Anti-Clickjack 1.7.2

    • Added support for Divi builder

  2. WP Anti-Clickjack 1.7.1

    • Tested up to WordPress 5.9

  3. WP Anti-Clickjack 1.7.0

    • Added HTTP header X-Frame-Options: SAMEORIGIN to further prevent clickjacking

20215 releases

  1. WP Anti-Clickjack 1.6.5

    • Tested up to WordPress 5.8

  2. WP Anti-Clickjack 1.6.4

    • Tested up to WordPress 5.7

  3. WP Anti-Clickjack 1.6.3

    • Support for Cornerstone Page Builder

  4. WP Anti-Clickjack 1.6.2

    • Support for WPBakery Page Builder

  5. WP Anti-Clickjack 1.6.1

    • Tested up to WordPress 5.6

20203 releases

  1. WP Anti-Clickjack 1.6.0

    • Added filter to disable the anti-clickjack script when needed
    • Tested up to WordPress 5.5

  2. WP Anti-Clickjack 1.5.4

    • Increase WordPress supported version to 5.4

  3. WP Anti-Clickjack 1.5.3

    • Increase WordPress supported version to 5.3

20193 releases

  1. WP Anti-Clickjack 1.5.2

    • Bug fix for PHP warning

  2. WP Anti-Clickjack 1.5.1

    • Increase WordPress supported version to 5.2.2

  3. WP Anti-Clickjack 1.5.0

    • Bug fix when updating plugins/themes
    • Support for Thrive editor

20182 releases

  1. WP Anti-Clickjack 1.4.0

    • Tested up to 4.8.9 and fixed conflicts with Elementor (if you are having an issue with a specific page builder please contact me)

  2. WP Anti-Clickjack 1.3.0

    • Tested up to 4.8.0

20171 release

  1. WP Anti-Clickjack 1.1.1

20152 releases

  1. WP Anti-Clickjack 1.1.0

  2. WP Anti-Clickjack 1.0.0

Questions about WP Anti-Clickjack’s releases

What is the latest version of WP Anti-Clickjack?

1.9.0, released on Oct 13, 2026 (3 weeks ago). It’s tested up to WordPress 7.1.4 and needs PHP 7.0 or later.

How often is WP Anti-Clickjack updated?

4 releases in the last year, about one every 91 days. Its first release on WordPress.org dates from May 2015.

Know when your rivals ship

Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.

Start free

Release dates come from the day each version’s folder was made in WP Anti-Clickjack’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.