11/30 days
Host Header Injection Fix

Host Header Injection Fix

v3.7

Sets custom headers for WP notification emails. Also fixes a security issue with WP versions < 5.5.

by Jeff Starr · Website

WordPress.org Log in to track

Rank

#9,23314

18 hours ago

Official installs

500+

public bucket

Est. installs

504
High confidence

Total downloads

26.9K5

all time

Rating

5 ★

6 reviews

Support threads

0

open topics

Support resolved

of threads

Tested up to

WP 7.1

compatibility

Historical growth

Growth %, estimated installs, rank and downloads — updated daily.

Install, rank and growth cover 11 of the last 30 days; downloads go back 90.

Growth %

Daily active-install growth.

-10%-5%0%5%10%
Jul 27Jul 30Aug 2Aug 5

Estimated installs

WP.org gives no history — this accumulates.

480500520540560
Jul 26Jul 29Aug 2Aug 5

Rank position

WP.org popularity order — lower is better.

#9.2K#9.2K#9.2K#9.3K#9.3K
Jul 26Jul 29Aug 2Aug 5

Downloads

Cumulative downloads over the selected range.

26.4K26.6K26.8K27K
Jul 4Jul 14Jul 23Aug 2

WP.org SEO rankings

Search position for tracked keywords.

Upcoming

Keyword rank tracking is coming soon

We're building WordPress.org search-position tracking so you can watch where your plugin ranks for the keywords that matter.

Compare with competitors

Auto-picked related plugins.

Log in to compare
Metric
Host Header Injection Fix
Post Notification by Email
upPrev
Comment Reply Email Notification
Estimated installs5042K1.7K3.9K
WP.org rank#9,233#5,170#5,732#3,712
30d growth+203%-0.6%+261%-25.5%
Rating5 ★4.8 ★4.6 ★4.8 ★
Reviews62412633
Support resolved33%
Version3.74.1.34.1.31.40.0
Tested up to7.15.2.247.17.0.2

Review stats

56 reviews
5★
100%
4★
0%
3★
0%
2★
0%
1★
0%

Development activity

Last updated
2026-07-18 5:29pm GMT
Latest version
3.7
Compatible up to
WordPress 7.1
Requires
WordPress 4.7
Developer
Jeff Starr
Plugin site
Visit

Estimated installs

504

Confidence

high

Data updated

Aug 5, 2026

Tracking since

2026-07-26

WP Analyze — plugin intelligence from public WordPress.org data.

The WordPress® trademark is owned by the WordPress Foundation, and our use of it is for identification purposes only, implying no endorsement.