HTTP Security Header
Healthy: maintained, last release 30 Dec 2025, 6 releases in 24 months, no unpatched vulnerabilities.
Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4.
| Ownership | 100 |
|---|---|
| Maintenance | 55 |
| Security | 100 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is HTTP Security Header still maintained?
- Yes. Last release 30 Dec 2025, 6 releases in the last 24 months. 30 Dec 2025 · wordpress.org
- Who owns HTTP Security Header, and has it changed hands?
- No change recorded. Main committer mohitgoyal1108 since Nov 2024. 3 Nov 2026 · SVN log
- Was HTTP Security Header removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is HTTP Security Header safe?
- No known vulnerabilities on record. 3 Nov 2026 · Wordfence Intelligence
- Is the latest HTTP Security Header update safe to install?
- No ownership change before 3.1. No one-star spike after it. 29 Apr 2025 · Release history
Active signals
Facts we detected, with links to the source.
- WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 31 Oct 2024 to 31 Oct 2024, 1 commits |
|---|---|
| mohitgoyal1108 | 1 Nov 2024 to 30 Dec 2025, 30 commits |
2 committers recorded. No ownership change since 2024.
Maintenance
- Last release
- 10 months ago
- Releases, 24 months
- 6
- Tested up to
- 6.9 vs 7.1
- Requires PHP
- 7.0 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 5 |
| Q1 2025 | 1 |
| Q2 2025 | 2 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 30 Dec 2025. Tested up to 6.9, 2 major versions behind WordPress 7.1.
Reputation
Last 90 days: no reviews. Lifetime: 5.0.
| 5 star | 3 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 0 |
Security record
No published vulnerabilities on record for this plugin.
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
1,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 16 |
|---|---|
| 11 May 2026 | 61 |
| 18 May 2026 | 79 |
| 25 May 2026 | 92 |
| 1 Jun 2026 | 82 |
| 8 Jun 2026 | 58 |
| 15 Jun 2026 | 41 |
| 22 Jun 2026 | 37 |
| 29 Jun 2026 | 65 |
| 6 Jul 2026 | 66 |
| 13 Jul 2026 | 47 |
| 20 Jul 2026 | 78 |
| 27 Jul 2026 | 113 |
| 3 Aug 2026 | 137 |
| 10 Aug 2026 | 128 |
| 17 Aug 2026 | 85 |
| 24 Aug 2026 | 59 |
| 31 Aug 2026 | 64 |
| 7 Sep 2026 | 76 |
| 14 Sep 2026 | 83 |
| 21 Sep 2026 | 88 |
| 28 Sep 2026 | 76 |
| 5 Oct 2026 | 67 |
| 12 Oct 2026 | 88 |
| 19 Oct 2026 | 115 |
| 26 Oct 2026 | 144 |
| 2 Nov 2026 | 19 |
Weekly downloads over the last 4 weeks are 20% above the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 3.1 |
|---|---|
| Author | MOHIT GOYAL |
| Added | 1 Nov 2024 |
| Last updated | 30 Dec 2025 |
| Active installs | 1,000+ |
| Requires WordPress | 5.0 |
| Tested up to | 6.9.11 |
| Requires PHP | 7.0 |
| Category | not stated |
| Tags | clickjacking, Security Headers, wordpress security, http security header, content security policy |
Other plugins by this author: Geo Targeting for Bricks Builder by Inspired Monks
Questions
Is HTTP Security Header still maintained?
Yes. Last release 30 Dec 2025, 6 releases in the last 24 months.
Who owns HTTP Security Header, and has it changed hands?
No change recorded. Main committer mohitgoyal1108 since Nov 2024.
Was HTTP Security Header removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is HTTP Security Header safe?
No known vulnerabilities on record.
Is the latest HTTP Security Header update safe to install?
No ownership change before 3.1. No one-star spike after it.