Plugin Pulse
← Pulse
H

Host Header Injection Fix

by Jeff Starr · Email & Marketing

Sets custom headers for WP notification emails. Also fixes a security issue with WP versions < 5.5.

⚠ Few reviews
How scoring works →
86 Health · A
Maintenance 100
Rating quality 82
Support 70

Daily downloads

Since 2022-10-05 · 1,379 days · wp.org + Plugin Pulse archive

-26%
Oct 22
Jul 26

30-day downloads

Trailing 30-day total · the growth curve wp.org stopped showing

Directory rank

Popularity rank over time · lower is better

Downloads per 1k installs · 30d

Engagement proxy · release spikes are signal, a long slide is an aging base

Estimated active installs

wp.org reports only “400+”. The real number sits in this band.

tracked estimate
400–500 ≈450

Refined from the date this plugin crossed into its current band.

Install trend · reconstructed from 1377 daily snapshots

Details

Version
3.6
Last updated
3mo ago
Added
2017-11-06
Requires WP
4.7
Tested up to
7.0.1
Requires PHP
5.6.20

Growth timeline

Install-band crossings we have observed, and how long each band took to outgrow

  1. 2026-04-25 500+ → 400+ down after 171 days in band
  2. 2025-11-05 600+ → 500+ down after 155 days in band
  3. 2025-06-03 700+ → 600+ down after 1 days in band
  4. 2025-06-02 600+ → 700+ up after 18 days in band
  5. 2025-05-15 700+ → 600+ down after 1 days in band
  6. 2025-05-14 600+ → 700+ up after 1 days in band
  7. 2025-05-13 700+ → 600+ down after 41 days in band
  8. 2025-04-02 600+ → 700+ up after 2 days in band

Embed this report card

Drop a live Pulse card for Host Header Injection Fix into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/host-header-injection-fix" width="480" height="300" style="border:0" loading="lazy" title="Host Header Injection Fix — Plugin Pulse"></iframe>
Preview card ↗

Host Header Injection Fix: 400+ active installs, 5.0★ (6 reviews). Plugin Pulse (WP Mayor), as of 2026-07-14. https://plugins.wpmayor.com/plugin/host-header-injection-fix