Header Code Security & Risk Analysis

wordpress.org/plugins/header-code

Simplest plugin that injects any code into wp_head().

100 active installs v1.2 PHP + WP 4.0+ Updated Sep 26, 2024
codeheaderinjectinsertwp_head
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Header Code Safe to Use in 2026?

Generally Safe

Score 92/100

Header Code has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The 'header-code' plugin version 1.2 exhibits a strong security posture based on the provided static analysis. The complete absence of identified AJAX handlers, REST API routes, shortcodes, and cron events significantly limits the plugin's attack surface, and crucially, all identified entry points have no obvious authentication weaknesses. The code analysis further reinforces this positive assessment, showing no dangerous functions, no raw SQL queries, and no file operations, all of which are excellent indicators of secure coding practices. The limited output escaping (33% properly escaped) is a minor concern but is mitigated by the absence of other exploitable vulnerabilities.

Key Concerns

  • Only 33% of outputs are properly escaped
Vulnerabilities
None known

Header Code Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Header Code Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
2
1 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

33% escaped3 total outputs
Attack Surface

Header Code Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 4
actionwp_headheader-code.php:17
actioninitoptions.php:12
actionadmin_menuoptions.php:13
actionadmin_initoptions.php:14
Maintenance & Trust

Header Code Maintenance & Trust

Maintenance Signals

WordPress version tested6.6.5
Last updatedSep 26, 2024
PHP min version
Downloads5K

Community Trust

Rating0/100
Number of ratings0
Active installs100
Developer Profile

Header Code Developer Profile

Gaiaz Iusipov

4 plugins · 560 total installs

87
trust score
Avg Security Score
90/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Header Code

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about Header Code