Skip to content
PluginCanary

GD Security Headers

by Milan Petrovic · 1,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 12 May 2026, 1 release in 24 months, no unpatched vulnerabilities.

85/ 100 Canary Score
Sub-scores for GD Security Headers
Ownership100
Maintenance85
Security90
Support70
Reputation70

How the score works

Quick answers

Is GD Security Headers still maintained?
Yes. Last release 12 May 2026, 1 release in the last 24 months. 12 May 2026 · wordpress.org
Who owns GD Security Headers, and has it changed hands?
No change recorded. Main committer GDragoN since Mar 2019. 3 Nov 2026 · SVN log
Was GD Security Headers removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is GD Security Headers safe?
3 known vulnerabilities, all fixed (latest in 1.9). Not on the exploited list. 8 Jul 2026 · Wordfence Intelligence
Is the latest GD Security Headers update safe to install?
No ownership change before 1.9. No one-star spike after it. 12 May 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master27 Mar 2019 to 27 Mar 2019, 1 commits
GDragoN28 Mar 2019 to 12 May 2026, 32 commits

2 committers recorded. No ownership change since 2019.

Maintenance

Last release
6 months ago
Releases, 24 months
1
Tested up to
7.0 vs 7.1
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for GD Security Headers
Q1 20240
Q2 20241
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20261
Q3 20260
Q4 20260

Last release 12 May 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 4.0.

Rating distribution
5 star6
4 star0
3 star0
2 star0
1 star2

Security record

1 vulnerability in 24 months (3 on record), patched (latest fixed in 1.9).

Show 3 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
8 Jul 2026GD Security Headers <= 1.8 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.81.9Patched before disclosure
29 Oct 2023GD Security Headers <= 1.7 - Authenticated (Admin+) SQL Injection7.2<= 1.71.7.1Patched before disclosure
17 Aug 2023GD Security Headers <= 1.6.1 - Reflected Cross-Site Scripting6.1<= 1.6.11.78

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for GD Security Headers
4 May 202630
11 May 2026836
18 May 2026289
25 May 2026198
1 Jun 2026154
8 Jun 2026153
15 Jun 2026228
22 Jun 2026341
29 Jun 2026128
6 Jul 2026149
13 Jul 2026150
20 Jul 2026174
27 Jul 2026218
3 Aug 2026248
10 Aug 2026232
17 Aug 2026187
24 Aug 2026170
31 Aug 2026176
7 Sep 2026183
14 Sep 2026202
21 Sep 2026215
28 Sep 2026217
5 Oct 2026203
12 Oct 2026230
19 Oct 2026309
26 Oct 2026237
2 Nov 202641

Weekly downloads over the last 4 weeks are 6% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

IP Location BlockScore 96 · 10,000+Wordfence SecurityScore 94 · 5,000,000+Sucuri SecurityScore 93 · 600,000+WP Content Copy Protection & No RightScore 93 · 100,000+Disabled Source, Disabled Right ClickScore 93 · 10,000+

Facts

Version1.9
AuthorMilan Petrovic
Added28 Mar 2019
Last updated12 May 2026
Active installs1,000+
Requires WordPress5.5
Tested up to7.0.8
Requires PHP7.4
CategorySecurity & Privacy > Security Scanning & Malware Protection
Tagscsp, security, dev4press, permission policy, content security policy

Other plugins by this author: forumAttachments for bbPress, GD Rating System, GD bbPress Tools, GD Mail Queue, SweepPress: Website Cleanup and Optimization, topicPolls Pro for bbPress, powerSearch for bbPress, DebugPress: Debugger in Popup, forumManager for bbPress, BreadcrumbsPress, DemoPress: Demo Content Generator, membersDirectory for bbPress

Questions

Is GD Security Headers still maintained?

Yes. Last release 12 May 2026, 1 release in the last 24 months.

Who owns GD Security Headers, and has it changed hands?

No change recorded. Main committer GDragoN since Mar 2019.

Was GD Security Headers removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is GD Security Headers safe?

3 known vulnerabilities, all fixed (latest in 1.9). Not on the exploited list.

Is the latest GD Security Headers update safe to install?

No ownership change before 1.9. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue