#368 by installs
Easy HTTPS Redirection (SSL)
The plugin allows an automatic redirection to the "HTTPS" version/URL of the site. Make your site SSL compatible easily.
- Installs
- 100,000+
- Rating
- 4.2 (71)
- Updated
- 19 days ago
SSL Insecure Content Fixer
Clean up WordPress website HTTPS insecure content
- Active installs
- 100,000+
- #322 of 1,000
- Downloads, all time
- 2.7M
- 2,678,753
- Downloads, 30 days
- 4.3K
- 961 in the last 7
- Rating
- 4.8 / 5
- 221 reviews
- Last updated
- 55 days ago
- Sep 6, 2026
- Version
- 2.7.2
- 31 releases
Upkeep and compatibility
| Last updated | September 6, 2026Updated in the last 3 months |
|---|---|
| Tested up to | WordPress 7.1.4Covers WordPress 7.1.4, the current release |
| Needs WordPress | 4.0 or newer |
| Needs PHP | 5.3 or newer |
| First published | April 20, 2012 |
| Support, last two months | No threads opened |
Reviews
4.8 / 5 from 221 reviews
| 5 stars | 206 |
|---|---|
| 4 stars | 6 |
| 3 stars | 0 |
| 2 stars | 1 |
| 1 star | 8 |
Downloads, last 30 days
What the author says it does
Clean up your WordPress website’s HTTPS insecure content and mixed content warnings. Installing the SSL Insecure Content Fixer plugin will solve most insecure content warnings with little or no effort. The remainder can be diagnosed with a few simple tools.
When you install SSL Insecure Content Fixer, its default settings are activated and it will automatically perform some basic fixes on your website using the Simple fix level. You can select more comprehensive fix levels as needed by your website.
WordPress Multisite gets a network settings page. This can be used to set default settings for all sites within a network, so that network administrators only need to specify settings on sites that have requirements differing from the network defaults.
See the SSL Insecure Content Fixer website for more details.
Translations
Many thanks to the generous efforts of our translators:
- Bulgarian (bg_BG) — the Bulgarian translation team
- Chinese simplified (zh_CN) — the Chinese translation team
- English (en_CA) — the English (Canadian) translation team
- English (en_GB) — the English (British) translation team
- English (en_ZA) — the English (South African) translation team
- Dutch (nl_NL) — the Dutch translation team
- German (de_DE) — the German translation team
- French (fr_FR) — the French translation team
- Italian (it_IT) — the Italian translation team
The opening of the plugin's own description. The full text, installation notes and changelog are on its WordPress.org page.
Questions the author answers
How do I tell what is causing the insecure content / mixed content warnings?
Look in your web browser’s error console.
- Google Chrome has a JavaScript Console in its developer tools
- FireFox has the Web Console or Firebug
- Internet Explorer has the F12 Tools Console
- Safari has the Error Console
NB: after you open your browser’s console, refresh your page so that it tries to load the insecure content again and logs warnings to the error console.
I get “insecure content” warnings from some of my content
You are probably loading content (such as images) with a URL that starts with “http:”. Take that bit away, but leave the slashes, e.g. //www.example.com/image.png; your browser will load the content, using HTTPS when your page uses it. Better still, replace “http:” with “https:” so that it always uses https to load images, e.g. https://www.example.com/image.png.
My website is behind a load balancer or reverse proxy
If your website is behind a load balancer or other reverse proxy, and WordPress doesn’t know when HTTPS is being used, you will need to select the appropriate HTTPS detection settings. See my blog post, WordPress is_ssl() doesn’t work behind some load balancers, for some details.
I get warnings about basic WordPress scripts like jquery.js
You are probably behind a reverse proxy — see the FAQ above about load balancers / reverse proxies, and run the SSL Tests from the WordPress admin Tools menu.
I changed the HTTPS Detection settings and now I can’t login
You probably have a conflict with another plugin that is also trying to fix HTTPS detection. Add this line to your wp-config.php file, above the lines about ABSPATH. You can then change this plugin back to default settings before proceeding.
define('SSLFIX_PLUGIN_NO_HTTPS_DETECT', true);
I still get “insecure content” warnings on my secure page
Post about it to the support forum, and be sure to include a link to the page. Posts without working links will probably be ignored.
Latest changelog entry
Released 2018-12-04
- fixed: some hard-coded link elements (e.g. stylesheets) when href is the first attribute
Tagged
Plugins that share its tags
#512 by installs
WP Force SSL & HTTPS SSL Redirect
Enable SSL & HTTPS redirect with 1 click! Add SSL certificate & WP Force SSL to redirect site from HTTP to HTTPS & fix SSL errors.
- Installs
- 80,000+
- Rating
- 4.7 (179)
- Updated
- 3 months ago
Lifetime SSL solution - Free SSL certificate & HTTPS redirect, force HTTPS, fix insecure site / SSL errors, security headers.
- Installs
- 50,000+
- Rating
- 4.9 (1.1K)
- Updated
- 1 day ago
Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate.
- Installs
- 3+ million
- Rating
- 4.9 (8.9K)
- Updated
- 5 days ago
#20 by installs
Hostinger Tools
Simplified WordPress management. Manage site info, maintenance, security, & redirects.
- Installs
- 3+ million
- Rating
- 3.5 (40)
- Updated
- 10 days ago
#227 by installs
Cloudflare
All of Cloudflare’s performance and security benefits in a simple one-click install.
- Installs
- 200,000+
- Rating
- 3.5 (181)
- Updated
- 26 days ago
Where this page's numbers come from
Read from the WordPress.org plugin API on , when WordPress 7.1.4 was the current release. WordPress.org rounds active installs into buckets. These are the directory's figures, not my verdict, and I haven't tested this plugin. The author takes donations at their donate page.