*The below only temporarily solves the issues. I ran into the missing header issues was a new cache file was generated.
I use several of the plugins you mentioned and recently noticed the same issue which drove me crazy as I manually confirmed that all of the headers were present in the correct files. I was able to resolve the issue by deleting my cache in WP Super Cache and confirmed that everything was back to working as expected by running a followup scan on SecurityHeaders.
Related Posts:
- Improve wordpress security by hiding non public resources
- Does this .htaccess security setting really work?
- File and directory permissions
- Why does the header set X-Robots-Tag apply to all pages?
- Using “wordpress_logged_in” to restrict direct access to uploads folder in 2021
- WordPress URL/Folder ReWrite using Htaccess
- Which WordPress scripts need to be executable for a fresh installation?
- Blocking access to wp-login via htaccess not working
- Attach to wp-login.php and xmlrpc.php
- XMLRPC filtering through htaccess not working
- Restricting user login by IP address
- WordPress: Adding Security
- How do I test to ensure that my wp-config file is protected?
- WordPress not seeing .htaccess rules
- Rules in .htaccess only if the requested URL is /wp-admin
- Headers Content-Security-Policy CSP Major Issue
- Disable directory browsing of uploads folder
- Strange behaviour of is_user_logged_in() and get_current_user_id()
- Selectively Disabling PHP via .htaccess in Root Directory
- Should I prevent access to .htaccess and wp-config.php files?
- Blocking wp-login in HTACCESS has also blocked password protected pages
- Basic Auth .htaccess on wp-login, but allow logout from woocommerce
- Using htaccess to prevent spam through wp-comments-post.php
- Fixing Access-Control-Allow-Origin (CORS origin) for multiple subdomains
- How can I create a private site that is inaccessible from the outside?
- Restrict Content for only Contributors via .htaccess
- Allowing access to certain WordPress created pages or posts with htaccess / htpasswd
- What does a security risk in a plugin look like?
- Securing wp-admin folder – Purpose? Importance?
- .htaccess and 500 error, extra character added
- Place static HTML files in path below WordPress page
- Static raw HTML page
- .htaccess file redirecting to parent directory
- Rewrite rule not working
- Correct htaccess to display page while also passing in GET parameters
- Temporary .htaccess blocking is disabling WP Crons from running?
- Block access to wp-admin
- .htaccess redirects disappeared after re-saving permalinks
- How have I misconfigured basic auth for my wordpress site?
- WordPress best solution shared theme for consumers and businesses (two url’s one instaltion)
- Redirect main domain to subdirectory
- Remove special characters in a URL
- WordPress multilingual website domain and folders
- Removing code added to htaccess with insert_with_markers
- Corrupt .htaccess file
- Cache policy not updated according to PageSpeed
- What’s the opposite of required valid user in .htaccess authentication
- How can i redirect one url to another url using .htaccess or add_rewrite_rule
- When is it necessary to have Header unset Vary in .htaccess
- Redirect http to https does not work on subdir where another instance of WordPress installed
- redirect the homepage using .htaccess outside of WordPress
- Https Redirect infinite loop in Mobile browsers
- 403 error on admin login page
- Redirect an old link to new site homepage [closed]
- .htaccess rewriting old RSS feed URL to WordPress feed URL
- How can I set Cache TTL for woff and woff2 font files with htaccess?
- How can I fix the redirect chain after implementing ssl on wordpress?
- External content won’t load in iframe in Safari
- How to write .htaccess so that https is on for subpages only but not the home page
- How do I configure wordpress structure for development using git and composer
- 404 redirect wp-login and wp-admin after changing login url [closed]
- How to create a redirect in the .htaccess file, with 2 exceptions
- Custom rewrite rule, url returning 404
- My Homepage Suddenly Disappeared and I Can’t Get It Back
- mod_rewrite doesn’t work as I want even with JSON API Plugin disabled
- How to turn this .htaccess rule into a dynamic rule with add_rewrite_rule, et al?
- Cannot login to WordPress site after changing .htaccess for security purposes
- add_rewrite_rule to remove /category/ from permalink
- Local PC cache stays filled with old WordPress Site data
- How to have a custom URI path for specific page template
- .htaccess Non-‘www’ to ‘www’ Subdomain Redirection Only Works for Homepage
- WordPress JSON API restrict to specific domain
- Where to put W3 Total Cache rewrite rules in .htaccess? [closed]
- Rewrite Rules not redirecting rewrite
- How do i allow access to a single file in my root directory? [closed]
- How to execute WordPress as though it is in the root folder while it is installed in a subdirectory?
- What’s the best way to manage a lot of 301 redirects in WordPress?
- Shared hosting, multiple sites, can’t log in to WP due to .htaccess redirection
- What causes 404 errors that forces you to rebuild a .htaccess file?
- How to set up MS Exchange Autodiscover alongside WordPress
- Xampp is not loading media
- PHP application in sub directory keeps redirecting to main site
- execute cron jobs when .htaccess login protected?
- Redirect WordPress site to a landing (construction) page using htaccess, with access to /wp-admin and /invoice
- htaccess redirect to path
- change URIs of migrated site
- htaccess- to hide subdirectory slug only from the post
- Subfolder renaming
- Steps for WordPress over SSL
- Targeting .htaccess file with file_put_contents
- Redirect Loop in Regex Moving to HTTPS
- insert_with_markers() WordPress & htaccess help
- WordPress login bug. Need an emergency solution
- .htaccess and virtual host configuration for WP in its own directory
- Cannot find webarh/malware redirect infection that only shows on Chrome
- How to rename the WordPress wp-login.php running on IIS6?
- Debug errors for “Destination directory for file streaming does not exist or is not writable”
- WordPress redirection
- Home page returns 404
- Allow file access only via cookie