Post #4363363

@da_667@infosec.exchange "Critically, for many of these security header options, the plugin does not properly enforce sufficient authorization checks before saving." This is why you don't let people run WordPress.