HTTP Headers
40,000+ active installs · Rated 4.3/5 · Updated October 16, 2026
Lets site owners set HTTP response headers such as Content-Security-Policy, CORS, Cache-Control and Permissions-Policy from the admin screen. Rules are written to .htaccess or .user.ini, or sent from PHP. Suits site owners who need custom headers without editing server config. Limit: .htaccess rules only take effect on servers that read that file, so some hosts still need server-side config.
Pros
- Sets many security and CORS headers from one settings screen
- Can write headers to .htaccess or .user.ini where the server allows it
Cons
- Needs a server that reads .htaccess or .user.ini for file-based rules
- Wrong Content-Security-Policy values can break page scripts and styles
Topics: Security plugins
Alternatives
-
Wordfence Security
5M+ active installs · Rated 4.7/5 · Updated September 30, 2026
A security plugin with an endpoint firewall, malware scanner, login protection and two-factor authentication.
-
Jetpack
3M+ active installs · Rated 3.7/5 · Updated October 12, 2026
A multi-purpose suite from Automattic that bundles many site tools under one account.
-
Really Simple SSL
3M+ active installs · Rated 4.9/5 · Updated September 15, 2026
A security plugin, formerly Really Simple SSL, that moves a site to HTTPS in one click and adds core hardening features.
-
WPS Hide Login
2M+ active installs · Rated 4.8/5 · Updated August 13, 2026
Changes the login URL so wp-login.php and wp-admin are not reachable by default for logged-out visitors.
-
All In One WP Security & Firewall
1M+ active installs · Rated 4.7/5 · Updated September 17, 2026
A security plugin offering login protection, firewall rules, user account hardening, file change detection and database security.
-
Disable Comments
1M+ active installs · Rated 4.7/5 · Updated October 25, 2026
A plugin for switching off comments across a WordPress site, either everywhere or only on chosen posts, pages or media.
-
SVG Support
1M+ active installs · Rated 4.8/5 · Updated July 25, 2026
SVG Support lets administrators upload SVG files to the media library.
-
Safe SVG
1M+ active installs · Rated 4.9/5 · Updated September 22, 2026
Safe SVG allows SVG uploads and sanitises each file on upload to strip scripts and unsafe markup.