host-header-injection-fix

Host Header Injection Fix

Sets custom headers for WP notification emails. Also fixes a security issue with WP versions < 5.5.

17.7 opportunity score Open evidence Open API Open on WordPress.org

400active installs

26.4Kdownloads

5.0rating

0unresolved threads

0complaints analyzed

6praise analyzed

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

48 / 112 rows with source links

42.9% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

64 rows with no attached evidence

0 rows have source counts but still need direct links.

Download Momentum

180 days

165recent 30 days 241previous 30 days -31.5%movement 1.9Kshown total

Related Opportunities

4 markets

Commercial opportunity Email: Lead capture reliability lead capture reliability · final 83.3 · proof validated Commercial opportunity Security: Trust and abuse-prevention operations trust and abuse-prevention operations · final 87.4 · proof validated Needs sharper proof Headers: Developer change safety and site customization developer change safety and site customization · final 72.6 · proof partial Needs sharper proof Notification: Mobile app and push engagement operations mobile app and push engagement operations · final 67.2 · proof partial

Source Evidence

Open evidence explorer

mixed support · high severity · relevance 0.94

WP Version 4.9.11

WP Version 4.9.11: users show security, compatibility, support pain that may indicate a product gap.

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

Proof Blocked card complete lead capture reliability Evidence linked to opportunity

WP Version 4.9.11 Dear Jeff, Is it necessary to install your plugin on WordPress Version 4.9.11?

mixed support · high severity · relevance 0.9

Is the plugin still useful when…

Is the plugin still useful when…: users show security, bugs, performance pain that may indicate a product gap.

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

Proof Blocked card complete lead capture reliability Evidence linked to opportunity

Is the plugin still useful when… I am currently hosting my site on Cloudways where you can configure your own SMTP service on the server, and for the application you can set the from address.

mixed support · high severity · relevance 0.82

Email Return Path

Email Return Path: users show security, missing feature pain that may indicate a product gap.

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

Proof Blocked card complete lead capture reliability Evidence linked to opportunity

Email Return Path Hi, What should this setting be?

praise review · high severity · relevance 0.6

Must Use for WordPress Security Reasons

Must Use for WordPress Security Reasons: users show security, bugs pain that may indicate a product gap.

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

Proof Blocked card complete lead capture reliability Evidence linked to opportunity

Must Use for WordPress Security Reasons The perfect solution that fixes the issue: Host Header Injection.

praise review · high severity · relevance 0.6

Simple fix for known security issue

Simple fix for known security issue: users show security, bugs pain that may indicate a product gap.

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

Proof Blocked card complete lead capture reliability Evidence linked to opportunity

Simple fix for known security issue This is a simple fix for a known and understandable security issue.

praise review · high severity · relevance 0.54

Another must have from Jeff

Another must have from Jeff: users show security pain that may indicate a product gap.

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

Proof Blocked card complete lead capture reliability Evidence linked to opportunity

Another must have from Jeff Anything Jeff Starr creates significantly enhances the security of your site.

praise review · medium severity · relevance 0.44

Simple fix for Great solution!

Simple fix for Great solution!: users show setup pain that may indicate a product gap.

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

Proof Blocked card complete lead capture reliability Evidence linked to opportunity

Simple fix for Great solution!

praise review · medium severity · relevance 0.44

NR1

NR1: users show setup pain that may indicate a product gap.

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

Proof Blocked card complete lead capture reliability Evidence linked to opportunity

NR1 Works perfectly and easily to install without any hassle.

praise review · medium severity · relevance 0.38

It Works!

It Works!: users praise reliable, which suggests what competitors already do well.

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

Proof Blocked card complete lead capture reliability Evidence linked to opportunity

It Works!

Competitor Context

16 shown

Mailchimp for WooCommerce weak incumbent · intel 80.1 · weakness 66.9

weak incumbent

5 unresolved support thread(s) 22 collected complaint signal(s) bugs support 2 source links Proof Blocked Evidence linked to opportunity

Buyer: store owners and WooCommerce agencies · Wedge: monitor ecommerce failures, handoffs, and revenue-impacting exceptions

source 1 source 2

ActiveCampaign Postmark for WordPress weak incumbent · intel 80.1 · weakness 71.4

weak incumbent

1 unresolved support thread(s) stale update history bugs missing feature 2 source links Proof Blocked Evidence linked to opportunity

Buyer: support-heavy site owners, agencies, and community operators · Wedge: triage repeated notifications threads, failed replies, knowledge gaps, and escalation workload

source 1 source 2

Site Mailer – SMTP Replacement, Email API Deliverability & Email Log weak incumbent · intel 79.9 · weakness 69.7

weak incumbent

below-average rating 12 collected complaint signal(s) compatibility support 2 source links Proof Blocked Evidence linked to opportunity

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

source 1 source 2

Mailchimp List Subscribe Form weak incumbent · intel 79.5 · weakness 68.9

weak incumbent

1 unresolved support thread(s) below-average rating support bugs 2 source links Proof Blocked Evidence linked to opportunity

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor newsletter submissions, notification delivery, spam, and CRM handoffs

source 1 source 2

Disqus Comment System weak incumbent · intel 79.0 · weakness 67.2

weak incumbent

below-average rating 46 collected complaint signal(s) missing feature bugs 2 source links Proof Blocked Evidence linked to opportunity

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

source 1 source 2

Klaviyo weak incumbent · intel 77.8 · weakness 66.5

weak incumbent

1 unresolved support thread(s) below-average rating bugs compatibility 2 source links Proof Blocked Evidence linked to opportunity

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

source 1 source 2

Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App weak incumbent · intel 77.3 · weakness 62.3

weak incumbent

3 unresolved support thread(s) 9 collected complaint signal(s) bugs compatibility 2 source links Proof Blocked Evidence linked to opportunity

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

source 1 source 2

Email Template Customizer for WooCommerce weak incumbent · intel 76.6 · weakness 65.4

weak incumbent

8 unresolved support thread(s) 35 collected complaint signal(s) bugs compatibility 2 source links Proof Blocked Evidence linked to opportunity

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

source 1 source 2

Repeated Themes

0 shown

No repeated plugin-level themes have been generated yet.

Collected Signals

9 shown from 9 collected

praise Another must have from Jeff (5 stars) review · 2020-08-07T22:30:32+00:00 · high severity · email

Another must have from Jeff: users show security pain that may indicate a product gap.

Evidence: Another must have from Jeff Anything Jeff Starr creates significantly enhances the security of your site.

security lead capture reliability Proof Blocked card complete Evidence linked to opportunity

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

source plugin

mixed Is the plugin still useful when… support · 2020-06-12T15:50:19+00:00 · high severity · email

Is the plugin still useful when…: users show security, bugs, performance pain that may indicate a product gap.

Evidence: Is the plugin still useful when… I am currently hosting my site on Cloudways where you can configure your own SMTP service on the server, and for the application you can set the from address.

security bugs performance missing feature lead capture reliability Proof Blocked card complete Evidence linked to opportunity

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

source plugin

praise NR1 (5 stars) review · 2020-06-11T22:40:20+00:00 · medium severity · email

NR1: users show setup pain that may indicate a product gap.

Evidence: NR1 Works perfectly and easily to install without any hassle.

setup reliable quality lead capture reliability Proof Blocked card complete Evidence linked to opportunity

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

source plugin

praise Simple fix for Great solution! (5 stars) review · 2019-11-19T22:46:36+00:00 · medium severity · email

Simple fix for Great solution!: users show setup pain that may indicate a product gap.

Evidence: Simple fix for Great solution!

setup easy quality lead capture reliability Proof Blocked card complete Evidence linked to opportunity

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

source plugin

mixed WP Version 4.9.11 support · 2019-09-10T12:59:16+00:00 · high severity · email

WP Version 4.9.11: users show security, compatibility, support pain that may indicate a product gap.

Evidence: WP Version 4.9.11 Dear Jeff, Is it necessary to install your plugin on WordPress Version 4.9.11?

security compatibility support setup lead capture reliability Proof Blocked card complete Evidence linked to opportunity

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

source plugin

praise Must Use for WordPress Security Reasons (5 stars) review · 2018-09-23T14:12:46+00:00 · high severity · email

Must Use for WordPress Security Reasons: users show security, bugs pain that may indicate a product gap.

Evidence: Must Use for WordPress Security Reasons The perfect solution that fixes the issue: Host Header Injection.

security bugs quality lead capture reliability Proof Blocked card complete Evidence linked to opportunity

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

source plugin

praise Simple fix for known security issue (5 stars) review · 2018-06-03T01:42:44+00:00 · high severity · email

Simple fix for known security issue: users show security, bugs pain that may indicate a product gap.

Evidence: Simple fix for known security issue This is a simple fix for a known and understandable security issue.

security bugs easy lead capture reliability Proof Blocked card complete Evidence linked to opportunity

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

source plugin

mixed Email Return Path support · 2018-02-04T15:32:57+00:00 · high severity · email

Email Return Path: users show security, missing feature pain that may indicate a product gap.

Evidence: Email Return Path Hi, What should this setting be?

security missing feature quality email lead capture reliability Proof Blocked card complete Evidence linked to opportunity

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

source plugin

praise It Works! (5 stars) review · 2018-02-03T23:43:04+00:00 · medium severity · email

It Works!: users praise reliable, which suggests what competitors already do well.

Evidence: It Works!

reliable lead capture reliability Proof Blocked card complete Evidence linked to opportunity

Buyer: marketing teams, agencies, and lead-generation site owners · Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

source plugin