Mikel King

Provides a method of adding X-Frame-Options to the http headers for sites hosted in an environment that does not grant access to 
the webserver config, .htaccess or lack mod_headers type facility.
<ul>
<li>Sets X-Frame-Options to SAMEORIGIN</li>
<li>Enqueue iframe blocking javascript</li>
</ul>
<h3>Arbitrary section</h3>
This is my arbitrary section. There’s really nothing special to add because this is truly a simple plugin with no settings or configuration. Turn it on and block the iframe content thieves. Much of this can also be achieve by working with a good hosting provider. If you are board then head over to my content site <a href="https://www.jafdip.com" rel="nofollow ugc">JAFDIP</a>.

Simple Iframe Buster

Provides a method of setting the X-Frame-Options header to SAMEORIGIN. Also enqueues a javascript based iframe blocker.

MOHIT GOYAL

HTTP Security Header helps protect your WordPress site by adding critical HTTP headers to each response — with no code required. These headers provide additional layers of protection against attacks such as cross-site scripting (XSS), clickjacking, content injection, and resource leaks.
This plugin offers a modern, responsive admin dashboard with validation, fallback safety, and full control over each header’s default or custom value.
Features Include: 
– Visual toggles for enabling/disabling headers 
– Option to use default or custom header values 
– Secure fallback if a header is misconfigured 
– Integrated header validation 
– Support for all major browser-supported headers 
– Nonce-based saving and admin notices 
– WP Multisite compatible 
– “Disable All” and “Reset to Important Headers” actions 
– Per-header input validation with real-time error fallback
Supported Headers: 
* Strict-Transport-Security (HSTS) 
* X-Frame-Options 
* X-Content-Type-Options 
* Referrer-Policy 
* Content-Security-Policy 
* Permissions-Policy 
* X-XSS-Protection 
* X-Permitted-Cross-Domain-Policies 
* Expect-CT 
* Cross-Origin-Opener-Policy (COOP) 
* Cross-Origin-Resource-Policy (CORP) 
* Cross-Origin-Embedder-Policy (COEP)
<h3>Features</h3>
<ul>
<li>Lightweight and performance-focused</li>
<li>No front-end impact</li>
<li>Choose default or custom header values</li>
<li>Secure validation and auto-fallbacks</li>
<li>Seamless plugin compatibility (e.g. WP Rocket)</li>
<li>Fully translation-ready and i18n-compliant</li>
<li>Nonce-protected admin save actions</li>
<li>Optional reset-to-defaults support</li>
<li>Reset or disable all headers with one click</li>
</ul>

HTTP Security Header


I recently integrated the Security Header plugin into my WordPress site, and it has significantly improved my website's security posture. The user-friendly interface made it easy to enable essential HTTP security headers with just a few clicks. 


Essential for Enhancing Website Security

Add and manage essential HTTP security headers with ease. Protect your WordPress site from XSS, clickjacking, and other common vulnerabilities.

Simple Iframe Buster vs HTTP Security Header