PluginProbe
HH

Host Header Injection Fix

v3.7

by Jeff Starr

πŸ‘‰ Enables custom headers for WP email notifications πŸ‘‰ Also provides a β€œset it and forget it” security fix for WP < 5.5 πŸ‘‰ Uses only 50KB of code, so super lightweight, fast, and effective Important As of WordPress 5.5, this plugin no long...

500+ active installs 5.0 (6 ratings) Requires PHP 5.6.20+ Requires WP 4.7+ Tested up to WP 7.1 Updated 3 months ago
Browse code Releases

About this plugin

πŸ‘‰ Enables custom headers for WP email notifications πŸ‘‰ Also provides a &#8220;set it and forget it&#8221; security fix for WP &lt; 5.5 πŸ‘‰ Uses only 50KB of code, so super lightweight, fast, and effective Important As of WordPress 5.5, this plugin no longer is necessary to fix the host-header security issue reported in Ticket #25239 finally is fixed, and mentioned in this post WordPress 5.5 Beta 4. Thank You WordPress devs! Is this plugin still useful? Yes, it enables you to choose the &#8220;From&#8221;, &#8220;Name&#8221;, and &#8220;Return-Path&#8221; headers for all WP notification emails....

Read the full description on WordPress.org →

Read the source

v3.7

Browse every file in this release with syntax highlighting and a file tree, or link straight to a line. Older releases and trunk are available from the version switcher.