[WordPress] 外掛分享： EssentialHeaders

首頁 › 外掛目錄 › EssentialHeaders
WordPress 外掛 EssentialHeaders 的封面圖片
10+
安裝啟用
—
尚無評分
3 天前
最後更新
—
問題解決
WordPress 6.3+ PHP 7.4+ v1.0.2 上架：2026-08-13

內容簡介

EssentialHeaders 是一款專注於增強 WordPress 網站安全性的外掛，透過附加 HTTP 安全標頭來保護網站，避免安全性問題被忽略或埋藏在伺服器配置中。

【主要功能】
• 提供多種安全標頭設定
• 簡單的控制面板管理標頭
• 預設安全標頭配置合理
• 支援內容安全政策 (CSP)
• 支援嚴格傳輸安全 (HSTS)
• 可自訂標頭值和開關

外掛標籤

開發者團隊

⬇ 下載最新版 (v1.0.2) 或搜尋安裝

① 下載 ZIP → 後台「外掛 › 安裝外掛 › 上傳外掛」
② 後台搜尋「EssentialHeaders」→ 直接安裝（推薦）
📦 歷史版本下載

原文外掛簡介

EssentialHeaders is a focused WordPress plugin that attaches the HTTP security headers browsers expect, so protection is not left to chance or buried in server config.
Under Settings → EssentialHeaders you get three tabs:

Headers — overview of which headers are enabled and will be sent
Settings — toggles and editable values for each header
About — plugin info

Headers covered:

Content-Security-Policy (CSP)
Strict-Transport-Security (HSTS)
X-Frame-Options
X-Content-Type-Options
Referrer-Policy
Permissions-Policy
X-Powered-By (remove it or replace its value)

Safer headers are enabled with sensible defaults. CSP starts off with a strict baseline, so you can test and allow only the sources your site needs before enabling it. Headers apply to public site responses (pages, feeds, and the login screen)—not wp-admin, AJAX, REST, GraphQL, or XML-RPC. HSTS is only sent over HTTPS. Default HSTS uses max-age only; add includeSubDomains yourself when every subdomain is ready.

延伸相關外掛

Wordfence Security – Firewall, Malware Scan, and Login SecurityWordfence Security – Firewall, Malware Scan, and Login SecurityWordfence Security 是最受歡迎的 WordPress 安全防護外掛，...Hostinger ToolsHostinger ToolsHostinger Tools 是一款多合一網站管理外掛，協助 WordPress ...Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)Really Simple Security 是一款輕量級且易於使用的 WordPress...Jetpack – WP Security, Backup, Speed, & GrowthJetpack – WP Security, Backup, Speed, & GrowthJetpack 是一款多合一 WordPress 外掛，整合網站安全防護、自...ManageWP WorkerManageWP WorkerManageWP Worker 是一款專為管理多個 WordPress 網站而設計的...Security Optimizer – The All-In-One Protection PluginSecurity Optimizer – The All-In-One Protection PluginSecurity Optimizer 是一款全方位的 WordPress 安全外掛，能...Safe SVGSafe SVGSafe SVG 是一款讓您在 WordPress 中安全上傳 SVG 檔案的外掛...LoginizerLoginizerLoginizer 是一款 WordPress 外掛，旨在防止暴力破解攻擊，當...Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force PreventionLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force PreventionLimit Login Attempts Security 是一款專為 WordPress 設計的...All-In-One Security (AIOS) – Security and FirewallAll-In-One Security (AIOS) – Security and FirewallAll-In-One Security (AIOS) 是一款功能全面的 WordPress 安...User Role EditorUser Role EditorUser Role Editor 外掛允許用戶輕鬆變更使用者角色和權限。用...MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple SitesMainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple SitesMainWP Child 外掛可將你的 WordPress 網站安全連線至自架的 ...Kadence Security – Password, Two Factor Authentication, and Brute Force ProtectionKadence Security – Password, Two Factor Authentication, and Brute Force ProtectionKadence Security 是一款專為 WordPress 網站設計的安全外掛...Sucuri Security – Auditing, Malware Scanner and Security HardeningSucuri Security – Auditing, Malware Scanner and Security HardeningSucuri Security 外掛旨在保護您的 WordPress 網站，提供全面...SiteGuard WP PluginSiteGuard WP PluginSiteGuard WP Plugin 旨在加強 WordPress 網站的登入及管理區...

文章
Filter
Mastodon