Send Basic Security Headers
Adds common HTTP security headers to front-end responses: nosniff, same-origin framing, a strict referrer policy and a restrictive permissions policy.
WPIDE Team 6 installs
Snippet Library
WordPress code snippets, ready to use
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
Don't Send Referrer Information to Other Sites
Adds rel="noreferrer" to links in your content that point to other websites, so the sites you link to do not learn which page the visitor came from.
Never Send the Referrer From Checkout and Account Pages
Sends a strict no-referrer policy on the WooCommerce checkout, order received and account pages, so order keys and other private URL details are never passed to third-party scripts or sites linked from there.
Open External Links in a New Tab
Adds target="_blank" and rel="noopener noreferrer" to links in post content that point to other domains. Optionally adds nofollow too. Requires WordPress 6.2 or newer.
Record the Page and Referrer in Gravity Forms
Fills hidden Gravity Forms fields with the title and address of the page the form is on and the site the visitor came from, so you know the context of each entry.
Security Headers for wp-admin and the Login Page
Sends nosniff, a strict referrer policy, a restrictive permissions policy and a cross-origin opener policy on dashboard and login pages, which front-end header snippets do not cover.
Site Health Check for Security Headers
Adds a Site Health test that loads your homepage and reports which common security headers (HSTS, CSP, nosniff, framing, referrer and permissions policies) are missing.