/ Plugin Category

/ Security & Privacy

/ Security Scanning & Malware Protection

/ WP Anti-Clickjack

WP Anti-Clickjack

By Andy Feliciotti

Security & Privacy / Security Scanning & Malware Protection

Reviewed by Omar Dabbas

Trusted WordPress expert with 20+ years of experience evaluating plugins for the WP ecosystem.

WP Anti-Clickjack Review - In-Depth Analysis

Protect your WordPress site from clickjacking attacks with this security plugin. It adds the X-Frame-Options header and includes OWASP's legacy browser frame breaking script.

Performance Overview

WPS Score

6.66/10

User Rating

5/5 (based on 3+ reviews)

Active Installations

4,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

1 / 10 (Very Low Risk) It is calculated using the weighted average of all versions.

What It Does

WP Anti-Clickjack is a powerful security plugin that helps prevent your WordPress site from being vulnerable to clickjacking attacks. Clickjacking is a malicious technique where an attacker tricks users into clicking on a concealed link or button by overlaying it on your legitimate website.

This plugin implements two key defense mechanisms:

X-Frame-Options Header: The plugin adds the X-Frame-Options: SAMEORIGIN HTTP header to your site's responses. This header instructs web browsers to prevent other websites from embedding your site within an iframe, effectively blocking clickjacking attempts.

OWASP's Legacy Browser Frame Breaking Script: The plugin includes a modified version of OWASP's legacy browser frame breaking script. This script prevents other sites from putting your site in an iframe, even in browsers that don't support the X-Frame-Options header. The script is optimized to work seamlessly in browsers with and without JavaScript enabled.

By combining these two security measures, WP Anti-Clickjack provides comprehensive protection against clickjacking attacks, ensuring the safety and integrity of your WordPress site.

For more information about clickjacking defense techniques, refer to the OWASP Clickjacking Defense Cheat Sheet.

Comparing to Alternatives

WP Anti-Clickjack is a specialized plugin focusing on preventing clickjacking attacks, with several other plugins offering similar security header functionalities.

Top alternatives

Strengths

Effectively blocks domain masking and clickjacking attempts.
Simple to use with immediate results as reported by users.
Helps achieve PCI compliance for websites.
No known security vulnerabilities.
Highly rated with perfect user satisfaction.

Weaknesses

Limited to anti-clickjacking functionality, may lack broader security features.
No pro version means fewer advanced customization options.
Smaller user base with only a few total ratings.
May require pairing with other security plugins for comprehensive protection.

User Sentiment Analysis

With a perfect 5-star rating from all reviewers, users consistently praise WP Anti-Clickjack for its effectiveness and ease of use.

Positive highlights

"It works!" - Avlis Productions Inc. highlighted its success in stopping domain masking.
"Extra security is always good!" - clankiller appreciated the added protection.
"Brilliant" - hallbeck noted it helped pass PCI compliance when other plugins failed.

Common complaints

Weaknesses

Limited feature set focused solely on clickjacking protection.
No advanced features due to absence of a pro version.
Small number of total reviews limits broader user feedback.

Who Should Use This?

Best for

Website owners seeking a straightforward, effective solution to prevent clickjacking and domain masking attacks without complex setup.

Not ideal for

Users looking for a comprehensive security suite or advanced customization options might find this plugin too limited.

Pricing & Value

Free version includes

The free version offers complete anti-clickjacking protection that effectively blocks domain masking attempts.

Final Verdict

WP Anti-Clickjack delivers a focused and reliable solution for preventing clickjacking attacks, earning unanimous praise from its users. Its simplicity and effectiveness make it a valuable tool for website owners needing this specific protection. However, its narrow scope and lack of a pro version mean it may need to be supplemented with other security plugins for broader coverage.

Given its flawless security record and positive user feedback, WP Anti-Clickjack is a trustworthy choice for enhancing site security against clickjacking. Users seeking more comprehensive security features should consider combining it with other plugins or exploring alternatives with wider functionality.

Other Notable Features

Here are a few other notable features of this free WP Anti-Clickjack plugin.

Anti Click Jacking

Browser Frame Breaking Script

Clickjacking

Security

FAQ

No, WP Anti-Clickjack is designed to have minimal impact on your site’s performance. The anti-clickjacking measures are applied efficiently without causing any significant overhead.