We earn commission when you buy through affiliate links.

This does not influence our reviews or recommendations.Learn more.

However, to do this directly in WordPress you could do the following.

X-Frame-Options Header in WordPress

Note: post-implementation, you’re able to use theSecure Headers Test toolto verify the results.

X-Frame-Options Header in WordPress

Having this injected into the Header will preventClickjackingattacks.

Below was discovered by Netsparker.

httponly-cookie-wordpress

Note: This would work on the HTTPS website.

If you are still on HTTP, you may consider switching toHTTPS for better security.

Once you set up the plugin, go to HTTP headers and enable them.

cookie-secure-flag

I hope the above helps you in mitigating WordPress vulnerabilities.

Wait before you go…

Are you looking to implement more secure headers?

However, if on shared hosting or want to do it within WordPress, then try thisplugin.

shield-http-headers

Conclusion

Securing a site is challenging, and it requires ongoing efforts.