Security Headers

Security headers are directives used by web applications to configure browser-side security defenses.

v1.4.0Joseph MendezUpdated Added 700 installs60% rating
88
Score
2
Errors
6
Warnings
+0
Change

Category Scores

Security82
Repo89
Performance100
Maintainability100

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

8 findings

Security

5

2 issue groups

Repo Compliance

2

2 issue groups

I18n

1

1 issue group

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.4
Category
Security
Occurrences
4
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGI18nDiscouraged text-domain loadingload_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['fpd_headers_import_json']1
Category
Security
Occurrences
1
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['fpd_headers_import_json']

ERRORRepo Complianceoutdated tested upto headerTested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.

ERRORRepo Complianceplugin header no licenseMissing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

External Connections

Potential connections found in static code analysis.

2 domains

Outbound calls

2

External assets

0

Incoming endpoints

6

Notable Domains

firstpagedigital.sg1 · outbound
linkedin.com1 · outbound

External Asset Domains

No external asset domains detected.

Incoming Endpoints

/wp-json/firstpage-sg-security-headers/v1/csp-reportREST

register_rest_route

Admin AJAX endpoints5
admin_post_fpd_headers_clear_csp_reportsauthenticated

admin_post

admin_post_fpd_headers_export_settingsauthenticated

admin_post

admin_post_fpd_headers_import_settingsauthenticated

admin_post

admin_post_fpd_headers_reset_settingsauthenticated

admin_post

admin_post_fpd_headers_test_headersauthenticated

admin_post

Score History

First score snapshot

v1.4.0

88

Latest

Findings
8
Errors
2
Warnings
6
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

25 nodes

Related Plugins

HTTP Security Header

1k+ active installs

99
Security Header Generator

500 active installs

87
68
HTTP Headers

50k+ active installs

59