Plugin profile · observed daily since 02 Aug 2026
Host Header Injection Fix
Active installs400+ rounded
Current authorJeff Starr
Owner changesNone while we have been watching
Last release2 months ago 18 Jul 2026
Support— no recent threads
Releases on record29
Rating5.0 /5 · 6
Added to directory06 Nov 2017
Requires WP4.7
Requires PHP5.6.20
Version lag0 up to date
Tested up toWP 7.1 up to date
PluginPedia reports published data and observable changes. It does not rate plugin quality or safety, infer intent, or make recommendations. These are observations rather than a verdict. How this works
Ownership
Held by Jeff Starr throughout, with no change of ownership observed since daily tracking began on 02 Aug 2026.
Full observed history, including every field transition
Committing accounts
Read from the plugin’s public release log, so these predate this registry. A committing account is not an owner. Thirty accounts commit to WooCommerce and it has never changed hands.
| Account | Releases | First | Last |
|---|---|---|---|
| specialk | 29 | 06 Nov 2017 | 18 Jul 2026 |
This registry did not observe a transfer; it read these names off a public log. Whether that reflects a change of ownership is not something the directory publishes.
Adoption
How widely the plugin is installed, and what the people running it think of it. WordPress.org rounds install figures to one significant digit, so they describe an order of magnitude rather than a headcount.
Small but established: 400+ active installs. Enough sites to show it works in the wild, too few for adoption to say much on its own.
7 downloads a day over the last 7 days, steady against the 7 days before. Downloads are counted exactly and without a ceiling, so they show movement the rounded install figure cannot.
08 Aug 2026peak 23/day07 Sep 2026
Install band fell to 400+ on 18 Aug 2026, from 500+. Both figures are rounded to one significant digit, so the size of the change is not knowable from them.
Daily record
Every field we record, one column per observation. Fields that never moved are named once rather than repeated across every column. A row of identical numbers would be padding.
| Field | 25 Aug | 26 Aug | 27 Aug | 28 Aug | 29 Aug | 30 Aug | 31 Aug | 01 Sep | 02 Sep | 03 Sep | 04 Sep | 05 Sep | 06 Sep | 07 Sep |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Downloads that day | — | 11 | 0 | 11 | 11 | 0 | 0 | 11 | 0 | 11 | 11 | 0 | 13 | 0 |
Unchanged throughout: ratings total (6) · active installs (400+) · version (3.7) · support threads (0) · threads resolved (0)
37 days of observation, most recent 14 shown.
Maintenance
When it was last released, and how far its declared compatibility has drifted from current WordPress.
Added to directory8.5 years ago 06 Nov 2017
Requires WP4.7
Requires PHP5.6.20
Version lagcurrent
Is anyone still maintaining this?
- Last released 18 Jul 2026, 52 days ago.
- Declares compatibility with WordPress 7.1, which is current.
- The same account maintains 29 other plugins, 29 of which were updated in the last 90 days. the account is active.
A plugin that does one thing correctly may need no changes for years; a long gap is not, by itself, evidence of neglect.
History
Everything dated that this registry holds about the plugin, most recent first. Releases carry the author’s own release date; everything else is dated to when it was observed.
Entries marked from the release log predate this registry, and daily observation began 02 Aug 2026. They were read from the plugin’s public SVN history after the fact, not watched as they happened. Everything else was observed directly.
- 02 Aug 20261 month agoInstall band moved to 500+Bands are rounded to one significant digit, so the size of the change is not knowable.
- 02 Aug 20261 month agoFirst observed by PluginPediaDaily snapshots of this plugin’s directory record begin here. Everything above this line is observed; anything before it comes from fields the API itself reports.
- 18 Jul 20262 months agoVersion 3.7 released
- 18 Apr 20265 months agoVersion 3.6 releasedfrom the release logCommitted by specialk.
- 27 Mar 20265 months agoVersion 3.5 releasedfrom the release logCommitted by specialk.
- 14 Nov 202510 months agoVersion 3.4 releasedfrom the release logCommitted by specialk.
- 20 Mar 202518 months agoVersion 3.3 releasedfrom the release logCommitted by specialk.
- 09 Oct 202423 months agoVersion 3.2 releasedfrom the release logCommitted by specialk.
- 20 Jun 20242 years agoVersion 3.1 releasedfrom the release logCommitted by specialk.
- 01 Mar 20242.5 years agoVersion 3.0 releasedfrom the release logCommitted by specialk.
- 24 Oct 20232.5 years agoVersion 2.9 releasedfrom the release logCommitted by specialk.
- 11 Jul 20233 years agoVersion 2.8 releasedfrom the release logCommitted by specialk.
- 27 Feb 20233.5 years agoVersion 2.7 releasedfrom the release logCommitted by specialk.
- 26 Sep 20223.5 years agoVersion 2.6.1 releasedfrom the release logCommitted by specialk.
- 15 May 20224 years agoVersion 2.6 releasedfrom the release logCommitted by specialk.
- 06 Nov 20178.5 years ago16 earlier releasesfrom the release logBetween 06 Nov 2017 and 13 Jan 2022. Listed individually in the public release log rather than here.
- 06 Nov 20178.5 years agoAdded to the WordPress.org directoryReported by the plugin API as the date this plugin was added.
What we know, and what we don’t
Everything on this page in one place, including the gaps, so that nothing here is mistaken for a clean bill of health.
What we know
- It has been held by Jeff Starr for all 37 days we have observed it.
- It was last released 2 months ago (18 Jul 2026).
- Its author declares it tested up to WordPress 7.1, which is current.
- WordPress.org reports 400+ active installs.
- It carries 6 ratings, averaging 5.0 out of 5.
What we don’t know yet
- No forum threads were open in the two months we measure, so how responsive its support is cannot be said. One new thread starts answering that.
Every record on this site, this one included, works under the same limits. We read what WordPress.org publishes about a plugin, never the plugin’s own code, so nothing here says whether a plugin is well built or safe. Install counts reach us already rounded; a change smaller than a band step doesn’t show. We don’t track security advisories yet. For anything older than our first observation we rely on the plugin’s public release log, where one exists. What this registry can and cannot see
Similar plugins
Plugins that share this one’s tags and talk about the same things in their own descriptions. Distinctive tags count for far more than broad ones. Sharing hover means something, sharing woocommerce does not, and a plugin that never mentions the subject matter is left out however its author tagged it. Among close matches, more widely installed plugins are listed first. This is a grouping rather than a ranking of quality.
WP Hide & Security Enhancer
Protect your website by concealing vulnerable WordPress traces, plugins, themes, login/admin url. 2FA, Captcha, Firewall, Security Headers etc.
50,000+ installs4.4★ (274)updated 13 Aug 2026
125× the installs
Compare side by side Headers Security Advanced & HSTS WP
Best all-in-one WordPress security plugin, uses HTTP & HSTS response headers to avoid vulnerabilities: XSS, injection, clickjacking. Force HTTP/HTTPS.
90,000+ installs4.9★ (79)updated 04 Sep 2026
225× the installs
Compare side by side Customize WordPress Emails and Alerts – Better Notifications for WP
Supercharge your WordPress email notifications using a WYSIWYG editor and shortcodes. Default and new notifications available. Add-ons available.
30,000+ installs4.8★ (184)updated 30 Jul 2026
75× the installs
Compare side by side Notification – Custom Notifications and Alerts for WordPress
Take full control of WordPress emails and notifications. Replace default messages, add custom triggers, and send alerts via email, webhook, Slack, and …
10,000+ installs4.6★ (124)updated 11 Mar 2026
25× the installs
Compare side by side Comment Reply Email Notification
This plugin allows visitors to subscribe to get answers to their comments via e-mail.
3,000+ installs4.8★ (33)updated 13 Aug 2026
Compare side by side Manage Notification E-mails
Enable and disable email notifications that WordPress sends to the admin and user. Works perfectly with many other plugins!
100,000+ installs4.8★ (54)updated 21 Jul 2026
250× the installs
Compare side by side Grouped from the tags each author chose for their own plugin, so the grouping is only as good as those tags.
Reach out about this record
Corrections, missing context, or anything else about Host Header Injection Fix: a person reads every submission, and corrections get a reply within 5 business days.