Adds Subresource Integrity (SRI) attributes to your page's elements for better protection against JavaScript DDoS attacks.
As of April 2026, Subresource Integrity (SRI) Manager is a WordPress SRI plugin with 1.0K+ active installations and a 2.9/5 rating from 11 reviews. It has been downloaded 17K+ times in total. Requires WordPress 4.1+ and PHP false+. Available on WordPress.org since 2015. Last updated 5 years ago — may have compatibility concerns. Downloads are up 21% this week. Top alternative: Auto SRI.
A WordPress plugin for easily adding a Subresource Integrity (SRI) declaration to any third-party content your pages load. The standards-based integrity attribute is a defense-in-depth best practice currently making its way into browsers. This plugin closely tracks the W3C draft.
Currently, the plugin automatically detects any third-party resources (like JavaScript libraries) and will make a SHA-256 hash of the content. It remembers this hash (until you uninstall the plugin or delete the hash from the admin interface), and modifies your page’s <script> and <link> elements on-the-fly. This way, your visitor’s Web browsers can automatically ensure that the specific library you’re using is the one they’re loading.
Using this plugin can dramatically reduce…
Plugin doesn’t appear to do anything/work on any of my WordPress 6 installations.
I have been testing with Mozzilla’s observatory.
in the age of page-caching (wp-super-cache) and minification/consolidation of scripts/styles (autoptimization), this probably needs to be hooked in after all that gets done otherwise the hash generated won’t match. Ideally, this tests the consolidated minimized script locally even before it gets uploaded to the CDN to cover the pathological case that the script gets mutated at the CDN even before it gets it’s SHA hash done.
The plugin works as advertised, out of the box. Kudos to the developers.
It would be smart to update the compatibility info, Tested up to:…
Plugin caused my BrainTree payment gateway to fail payments.
Using the Plug in Yoco Payment Gateway by Yoco for credit cards and this plug in prevents Yoco from poping up and then redirects to the confirm order page like if it was an EFT when customer make payment via card.
This prevents card payments. So I disabled it.
This worked but im not sacrificing a function to kill revenue. There must be another way had another way just cant remember what the htaccess code was for this.
| WordPress | 4.1+ requiredTested up to 5.6.17 |
| PHP | false+ required |
filterTag function now requires a third parameter.Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.