A plugin header is the metadata block at the top of a WordPress plugin file. It typically contains fields such as the plugin name, author, version, description, and plugin URI. WordPress reads this information to identify the plugin and display it in the admin interface, which makes the header part of the software’s trust surface.
In cyber security, plugin headers matter because attackers can copy or fake them to make malicious code look legitimate. A convincing header may help malware blend into normal administration, delay suspicion, or impersonate a routine maintenance component. Defenders should treat header data as useful inventory information, not proof of safety. To verify a plugin, check the file’s behavior, source, integrity, and location on disk, especially in must-use plugin paths where malicious code may load automatically. Good header hygiene helps administration, but it does not replace code review and account monitoring.