PLUGIN SECURITY
Is Header Footer safe?
Head and Footer plugin lets you to add HTML code to the head and footer sections of your site pages, inside posts... and more!
What this plugin does
- Slug:
header-footer - Author: Stefano Lissa
- 200000+ active installs
- 98/100 rating (735 reviews on wordpress.org)
- 5843043 all-time downloads
- On WordPress.org since 2008-04-07
adsampanalyticsfooterheader
Maintenance status
- Latest known version: 3.3.6
- Last updated: 2026-03-28 12:46pm GMT
- Tested up to WordPress: 6.9.7
- Requires PHP: 7.0+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
1 known CVE on file for Header Footer. Reported between 2025 and 2025.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-13900 | Head, Footer and Post Injections [header-footer] < 3.3.1 | Improper Control of Generation of Code ('Code Injection') | Medium 4.1 | < 3.3.1 | 3.3.1 | 2025-02-20 | ✓ fixed in latest |
How to fix it
Keep Header Footer updated — 3.3.6 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Google for WooCommerce — 800000+ active installs — 54/100 (266)
- AMP — 400000+ active installs — 76/100 (367) — max PHP 8.4
- Ad Inserter – Ad Manager & AdSense Ads — 300000+ active installs — 98/100 (2428) — max PHP 8.4
- Ads.txt Manager — 100000+ active installs — 94/100 (15) — max PHP 8.4
- Advanced Ads – Ad Manager & AdSense — 100000+ active installs — 98/100 (1461)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.