Guilherme Dumas Peres

CSP Violation Reporter adds a public WordPress REST endpoint for browser Content Security Policy violation reports and stores received violations in a local database table.
Reports can be reviewed from Tools > CSP Violations. The plugin supports the modern Reporting API payload format as well as the older <code>csp-report</code> JSON shape.
Endpoint:
<pre><code>/wp-json/csp-violation-reporter/v1/report
</code></pre>
The plugin does not create or modify Content Security Policy headers. Site owners should configure CSP headers in their web server, hosting dashboard, theme, or security tooling.
Example report endpoint configuration:
<pre><code>Content-Security-Policy: default-src 'self'; report-uri https://example.com/wp-json/csp-violation-reporter/v1/report
</code></pre>
For the modern Reporting API, use an HTTPS endpoint:
<pre><code>Reporting-Endpoints: csp-endpoint="https://example.com/wp-json/csp-violation-reporter/v1/report"

Content-Security-Policy: default-src 'self'; report-to csp-endpoint
</code></pre>
<h3>Privacy</h3>
This plugin stores CSP violation reports submitted by browsers. Stored fields can include the document URL, referrer URL, blocked URI, violated directive, source file, line and column numbers, a user agent string, a salted hash of the remote address, and the raw report payload.
The plugin does not store raw IP addresses and does not transmit report data to external services.

CSP Violation Reporter

Collect Content Security Policy violation reports through a WordPress REST endpoint and review them in the admin dashboard.

Ebrahim Shafiei (EbraSha)

Abdal Security Headers is a powerful WordPress plugin that enhances your website’s security through HTTP security headers. It provides an easy-to-use interface for managing security policies and protecting against common web vulnerabilities.
Key Features:
<ul>
<li>Modern UI with iOS-style switches</li>
<li>Real-time CSP Header Preview</li>
<li>Automatic security header configuration</li>
<li>Protection against XSS attacks</li>
<li>Prevention of clickjacking attempts</li>
<li>MIME-type sniffing protection</li>
<li>Strict HTTPS enforcement</li>
<li>Full RTL support</li>
<li>Mobile-responsive interface</li>
</ul>
Security Headers Managed:
<ul>
<li>X-Frame-Options</li>
<li>X-XSS-Protection</li>
<li>X-Content-Type-Options</li>
<li>Strict-Transport-Security (HSTS)</li>
<li>Content-Security-Policy (CSP)</li>
<li>Referrer-Policy</li>
<li>Feature-Policy</li>
<li>Access-Control-Allow-Origin</li>
</ul>
<h3>Languages</h3>
This plugin is available in the following languages: 
– English (en_US) 
– Persian (fa_IR)
<h3>License</h3>
This plugin is released under the GPLv2 or later License. 
License details: <a href="http://www.gnu.org/licenses/gpl-2.0.html" rel="nofollow ugc">http://www.gnu.org/licenses/gpl-2.0.html</a>

Abdal Security Headers

Enhance WordPress security with essential HTTP security headers, protecting against XSS, clickjacking, and other common web vulnerabilities.

CSP Violation Reporter vs Abdal Security Headers