PluginScout

Host Header Injection Fix — WordPress Security Plugin

by Jeff Starr · WordPress.org page · Website

v3.7 Tested up to WP 7.1 PHP 5.6.20+

Host Header Injection Fix has 400+ active installs on WordPress.org and 27,248 downloads all time. We have tracked it since September 4, 2026; download trends appear after 30 days of data. The last update was on July 18, 2026, tested up to WordPress 7.1.

Host Header Injection Fix at a glance

Active installs
400+
Total downloads
27,248
Downloads, last 30 days
–
available after 30 days of tracking
30-day growth
–
tracking since September 4, 2026

Is Host Header Injection Fix well maintained?

Support threads resolved
No open threads
nothing waiting on the WordPress.org forum
WordPress compatibility
Current
tested up to WordPress 7.1, the current release is 7.1

Features

The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.

  • BBQ Pro – Blazing fast WordPress firewall
  • Blackhole Pro – Automatically block bad bots
  • Banhammer Pro – Monitor traffic and ban the bad guys
  • GA Google Analytics Pro – Connect WordPress to Google Analytics
  • Head Meta Pro – Ultimate Meta Tags for WordPress
  • REST Pro Tools – Awesome tools for managing the WP REST API
  • Simple Ajax Chat Pro – Unlimited chat rooms
  • USP Pro – Unlimited front-end forms

Host Header Injection Fix reviews and ratings

6 reviews on WordPress.org, with the most recent ones as their authors posted them.

All reviews
5.0 out of 5

6 reviews

5★
6
4★
0
3★
0
2★
0
1★
0

  • Another must have from Jeff

    Anything Jeff Starr creates significantly enhances the security of your site.

    Mr Tibbs

  • NR1

    Works perfectly and easily to install without any hassle.

    mickeey

  • Simple fix for Great solution!

    GOOD! Light-smooth install for must have solution!

    lars Portman

  • Must Use for Wordpress Security Reasons

    The perfect solution that fixes the issue: Host Header Injection. All of Jeff Starr's plug-ins are highly recommended.

    warriorhelp

  • Simple fix for known security issue

    This is a simple fix for a known and understandable security issue. Thank you.

    RayBernard

  • It Works!

    It works.

    Matt

Details

Sets custom headers for WP notification emails. Also fixes a security issue with WP versions < 5.5.

The full description, screenshots and every review live on the WordPress.org page.

Rankings Host Header Injection Fix competes in

Tags

  • email
  • headers
  • injection
  • notification
  • security

More from Jeff Starr

Version
3.7
Last updated
Jul 18, 2026
First published
Nov 6, 2017
Requires WordPress
4.7
Tested up to
7.1
Requires PHP
5.6.20
Pricing
Free on WordPress.org

Host Header Injection Fix FAQ

What does Host Header Injection Fix do?

According to its WordPress.org readme, Host Header Injection Fix offers BBQ Pro – Blazing fast WordPress firewall, Blackhole Pro – Automatically block bad bots, Banhammer Pro – Monitor traffic and ban the bad guys, GA Google Analytics Pro – Connect WordPress to Google Analytics and Head Meta Pro – Ultimate Meta Tags for WordPress.

How many active installs does Host Header Injection Fix have?

WordPress.org reports 400+ active installs for Host Header Injection Fix as of September 7, 2026.

Is Host Header Injection Fix still maintained?

Yes. The last release was on July 18, 2026 and it is tested up to WordPress 7.1.

Is Host Header Injection Fix free?

Host Header Injection Fix is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.