Insert Headers And Footers
Insert Headers And Footers has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Insert Headers And Footers has a vendor fix available, so running the current release closes it.
All of these findings were reported by Carlos Ferreira. Insert Headers And Footers is installed on roughly 300,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-2111WP Headers And Footers <= 3.1.1 - Cross-Site Request Forgery to Arbitrary Options Update
Read the full analysisVulnerability Records

Insert Headers And Footers
Author
Adnan
WP Headers and Footers plugin helps you to insert code to your WordPress website headers and footers section like Google Analytics tracking code, Facebook Pixels code, Google Optimize code for A/B testing, Custom CSS code, and more. You don’t need to edit the theme files to insert the code. The simple interface of this plugin allows you to add code and different scripts from one place to your WordPress website (Headers, Footers, and Body section). Features Insert code to your WordPress headers & Footers Insert Google Analytics Code to any WordPress theme Insert Facebook Pixels Code Add Google Optimize Code for A/B testing ( Ab Testing ) Add Google search console authentication code to any theme for verification Add Custom CSS, any script, and HTML to your website Google Tag Manager code/script insertion You can also add microsoft clarity tracking code to your website You can also insert code to your website body section Can add Bing webmaster tool code for website verification Add Google AdSense code If you find our plugin useful, please leave a good rating/review and check our other plugins. Analytify – Google Analytics Plugin LoginPress – For Custom login page and login page security Simple Social Buttons – Plugin for Social share buttons and social icons Related Posts Thumbnails Plugin – For related posts/products Under Construction, Coming Soon & Maintenance Mode – Plugin for Under construction & Coming soon page
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C