How many vulnerabilities does Head, Footer and Post Injections have?

The audit found 70 findings: 0 critical, 5 high, 50 medium severity.

Should I use Head, Footer and Post Injections?

Based on the latest audit (grade A, risk HIGH), review the 70 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

Head, Footer and Post Injections

Q: Is Head, Footer and Post Injections secure?

WP HealthKit's independent audit rates Head, Footer and Post Injections overall risk as HIGH with a report-card grade of A.

v3.3.6WordPress Plugin300K+ installs4.9Audited 140 days ago

HIGH

Total Findings

Security Grade

Active Installs

300K+

Coding Score

100/100

Security Findings

Critical0

High5

Medium50

Low13

Info2

Executive Summary

Is Head, Footer and Post Injections secure? In WP HealthKit's independent 2026 audit, Head, Footer and Post Injections received an overall risk of HIGH and a report-card grade of A across 70 findings (0 critical, 5 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

Readiness

Coding Standards

100/100

PHP Compatibility

Requires PHP 8.0Declared minimum: 7.0Mismatch detected

Categories with Findings

PHP CompatibilityPlugin ConflictsInternationalizationType SafetyWordPress CompatibilityHook Wiring

Plugin Info

Active Installs: 300K+
WP.org Rating: 4.9
Requires WP: 6.1+
Tested Up To: 6.9.4
Requires PHP: 7.0+
Audit Count: 1
Type: plugin

Embed Audit Badge

Show your audit status in your README or website.

[![Head, Footer and Post Injections security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/header-footer)](https://wphealthkit.com/directory/header-footer)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin