SpoofProof vs Host Header Injection Fix

Head-to-head on the signals that matter, from the public WordPress.org data.

Health D41

Health A85

Active-install trajectory

Host Header Injection Fix moved down one install band, 500+ to 400+. That's a single step across the whole window, so there's no trajectory to draw. The download trend below moves daily.

Metric	SpoofProof	Host Header Injection Fix
Active installs Modeled from the public "N+" band and recent downloads.	10–20	400–500 ✓
Install trend Change in active installs across the charted window.	0% ✓	-20%
Overall health	—	A · 85 ✓
Maintenance How recently the plugin was updated.	3/100	97/100 ✓
Rating quality Volume-adjusted review quality.	—	82/100 ✓
Support Share of forum threads marked resolved.	—	70/100 ✓
Rating (weighted for review count)	—	4.3★ ✓
Reviews	0	6 ✓
Ranking optimization How well the listing is tuned to rank on wp.org.	36/100	90/100 ✓
Removal risk Maintenance signals that precede a wp.org closure. Not an official status.	High	Low ✓
Last updated	10.2y ago	4mo ago ✓
Downloads · 30d	40	267 ✓
Install conversion Active installs over lifetime downloads. Downloads include every update, so older and more frequently released plugins read lower.	0.5%	1.4% ✓
Category	Security	Email & Marketing

✓ marks the stronger plugin on each row. Rows where they're level show no marker.

Release activity

SpoofProofHost Header Injection Fix

7-day average daily downloads. Downloads spike for about a week after each release as the install base re-downloads, so read this as release cadence, not growth.