Headers Security Advanced & HSTS WP v5.3.5
Best all-in-one WordPress security plugin, uses HTTP & HSTS response headers to avoid vulnerabilities: XSS, injection, clickjacking. Force HTTP/HTTPS.
Plugin Auditor is an independent service and is not affiliated with, endorsed by, or sponsored by Headers Security Advanced & HSTS WP or its developer. Disclaimer.
- Audit coverage Not yet audited newest version pending
- On Plugin Auditor since Sep 4, 2026
- Last audited Sep 4, 2026
Compatibility & requirements
The PHP and WordPress versions this plugin needs, and how current its version support is.
- Requires PHP 7.4+
- Requires WordPress 4.7+
- Tested up to WP 7.0 WP 7.1.3 is current
- Version adoption 77% run the current version
Audit scores by category
125 checksHow this plugin scores across the six areas we audit, from security to accessibility.
- 105 Passed
- 17 Warnings
- 3 Failed
33 of 37 checks passed.
52 of 61 checks passed.
10 of 12 checks passed.
4 of 6 checks passed.
3 of 3 checks passed.
3 of 6 checks passed.
Code footprint
How much code ships in this plugin, and the file types that make it up.
ZIP file size
910.9 KB
2.7 MB unzipped
Total files
50
across all file types
Lines of PHP
1,393
in 17 files Small
File types
- PHP
- PO
- MO
- TXT
- Other
Top issues
The most important findings from the latest audit, ordered by severity.
- 0 Critical
- 9 High
- 34 Medium
- 29 Low
This is a preview of notable findings. Full file-level results, line numbers and code context are in the scan.
View full reportHow scores changed across versions
Across 30 audited versions of Headers Security Advanced & HSTS WP, Security improved the most (+3). No category regressed over this span. The codebase grew 224% in size.
Audited 5.0.18 → 5.3.3 · 30 versions
How issues changed across versions
Findings by severity for each audited version, so you can see which issues were fixed over time.
Download momentum
How fast this plugin is being installed lately, and whether that pace is rising or slowing.
Last 7 days
8,003
downloads
Today
1,146
downloads
Week over week
−55%
vs previous week
Month over month
0%
vs previous month
Download trend: Steady. Abandonment risk: None.
Version intelligence
23% of installs run an older version
≈ 20.6K+ sites on a lower-scoring version.
- Other
- v5.0
- v5.2
- v5.3
Maintenance & history
How actively this plugin is kept up, from its last update to its release history.
Last updated
This month
Jul 7, 2026
Actively maintainedRelease cadence
~ every 15 days
average between releases
Total releases
41
since Aug 2022 · 4 yrs
Contributors & developers
The people credited with building and maintaining this plugin.
Running Headers Security Advanced & HSTS WP in Your Site?
Headers Security Advanced & HSTS WP and its trademarks are used only to identify the plugin analyzed and remain the property of their owners. This is an independent Plugin Auditor audit, not affiliated with, sponsored by, or endorsed by the plugin's developer. Metadata may come from WordPress.org; scores, findings, classifications, and visualizations are independently generated by Plugin Auditor. Full disclaimer.