Title: Httponly
Last modified: August 28, 2024

---

# Httponly

 *  Resolved [angpanday](https://wordpress.org/support/users/angpanday/)
 * (@angpanday)
 * [1 year, 9 months ago](https://wordpress.org/support/topic/httponly-2/)
 * I urgently need to have my website fixed. It has a vulnerability issue:
 * 150123 – Cookie Does Not Contain the ‘HTTPOnly’ Attribute
 * I’m currently using the free version. If I upgrade to the paid version, will 
   it fix the problem?
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fhttponly-2%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 1 replies (of 1 total)

 *  Plugin Support [wfpeter](https://wordpress.org/support/users/wfpeter/)
 * (@wfpeter)
 * [1 year, 9 months ago](https://wordpress.org/support/topic/httponly-2/#post-17981078)
 * Hi [@angpanday](https://wordpress.org/support/users/angpanday/),
 * This doesn’t look like a Wordfence scan result message. Does the message indicate
   that this concerns a cookie set by Wordfence on your website? If not, it may 
   need to be raised with the plugin developer involved.
 * It looks here like Wordfence cookies **are** set HTTPOnly. It’s possible the 
   message is being thrown about `wp-settings-1`, which isn’t sensitive, and may
   need to be read by JavaScript for some of WordPress’ functionality. If a session
   token or cookie from a plugin containing sensitive information was the cause 
   of the message, it would be important to check.
 * Thanks,
   Peter.

Viewing 1 replies (of 1 total)

The topic ‘Httponly’ is closed to new replies.

 * ![](https://ps.w.org/wordfence/assets/icon.svg?rev=2070865)
 * [Wordfence Security - Firewall, Malware Scan, and Login Security](https://wordpress.org/plugins/wordfence/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/wordfence/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/wordfence/)
 * [Active Topics](https://wordpress.org/support/plugin/wordfence/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wordfence/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wordfence/reviews/)

 * 1 reply
 * 2 participants
 * Last reply from: [wfpeter](https://wordpress.org/support/users/wfpeter/)
 * Last activity: [1 year, 9 months ago](https://wordpress.org/support/topic/httponly-2/#post-17981078)
 * Status: resolved