Insert Headers And Footers

Insert Headers And Footers has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Insert Headers And Footers has a vendor fix available, so running the current release closes it.

All of these findings were reported by Carlos Ferreira. Insert Headers And Footers is installed on roughly 300,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSHigh
7.5/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Insert Headers And Footers vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.5CVE-2025-2111

WP Headers And Footers <= 3.1.1 - Cross-Site Request Forgery to Arbitrary Options Update

Read the full analysis

Vulnerability Records

1 records
Insert Headers And Footers banner
Latestv3.1.5

Insert Headers And Footers

Adnan

Author

Adnan

5.0(135)
100/100
Last Updated
2026-07-17 (2mo ago)
Active Installs
300,000+
Downloads
2,765,320
Requires WP
5.0+
Requires PHP
0+
Tested up to
WP 7.0.4
Created
2017-04-20 (10y ago)

WP Headers and Footers plugin helps you to insert code to your WordPress website headers and footers section like Google Analytics tracking code, Facebook Pixels code, Google Optimize code for A/B testing, Custom CSS code, and more. You don’t need to edit the theme files to insert the code. The simple interface of this plugin allows you to add code and different scripts from one place to your WordPress website (Headers, Footers, and Body section). Features Insert code to your WordPress headers & Footers Insert Google Analytics Code to any WordPress theme Insert Facebook Pixels Code Add Google Optimize Code for A/B testing ( Ab Testing ) Add Google search console authentication code to any theme for verification Add Custom CSS, any script, and HTML to your website Google Tag Manager code/script insertion You can also add microsoft clarity tracking code to your website You can also insert code to your website body section Can add Bing webmaster tool code for website verification Add Google AdSense code If you find our plugin useful, please leave a good rating/review and check our other plugins. Analytify – Google Analytics Plugin LoginPress – For Custom login page and login page security Simple Social Buttons – Plugin for Social share buttons and social icons Related Posts Thumbnails Plugin – For related posts/products Under Construction, Coming Soon & Maintenance Mode – Plugin for Under construction & Coming soon page

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C