HTTPS Mixed Content Detector
When deploying a TLS enabled website, you must ensure that all content loaded on the site is loaded from secure origin. If your content is loaded from an insecure source, the security of your whole site is compromised…
Use with caution
HTTPS Mixed Content Detector works, but test it on a staging site before relying on it in 2026. It runs on 60+ sites, is rated 5/5 and was last updated 12 years ago, and scores 45/100 on our health check.
- Small user base (60+ active installs)
- No update in 11 years
How does it stack up?
Side-by-side on installs, updates, ratings & supportDaily downloads
Download spikes usually follow a new release — each site that auto-updates counts as a download.
Rankings
Where HTTPS Mixed Content Detector stands todayWordPress.org search rankings
Live position in the plugin search, top 100| Keyword | Position |
|---|---|
| https | >100 |
| ssl | >100 |
| tls | >100 |
Version adoption
Share of active sites per release.
Rating breakdown
★★★★★★★★★★ 5 from 6 reviews
About HTTPS Mixed Content Detector
From the official readme · v1.2.0Description
When deploying a TLS enabled website, you must ensure that all content loaded on the site is loaded from secure origin.
If your content is loaded from an insecure source, the security of your whole site is compromised and modern browsers
will downgrade your website’s security rating.
The HTTPS Mixed Content Detector plugin attempts to identify sources of mixed content warnings. The plugin will examine
content loaded from the site when admins are viewing the site. Any content that violates the policy of loading content
that originates from “https:” resources will trigger an error and that resource will be logged. Viewing the log will
allow you to examine the site for any warnings and remove them before they cause problems for your website.
Installation
This section describes how to install the plugin and get it working.
- Upload
https-mixed-content-detectorto the/wp-content/plugins/directory - Activate the plugin through the ‘Plugins’ menu in WordPress
- Browse your site as an admin
- View the reports listed in the “Content Security Policy Reports” page in the admin
- Delete each violation report log as you fix it
- Rinse and repeat until your site is free of violation reports
Changelog
Add violation locations, sampling mode and more WP list table information
1.2.0
- Add check for violation locations
- Add sampling mode for examining non-logged in traffic
- Add more content shown in the WP list table
1.1.0
- Add check for HTTPS domain when logging violation
- Add
list,resolve,removeandunresolveWP CLI commands - Update CSP directives to be more specific
1.0.2
- Remove false positives from the log
1.0.1
- Limit logging to work only for admins
1.0.0
- Initial release
For developers
Is this your plugin? Show off the numbers.
Add a live badge to your site, docs or GitHub README. It updates on its own — no account needed.
Best HTTPS Mixed Content Detector alternatives
All https plugins →FAQ
HTTPS Mixed Content Detector: quick answers
Straight answers, pulled from live WordPress.org data.
Live data from WordPress.org · checked Sep 26, 2026
Is HTTPS Mixed Content Detector free?
Yes. HTTPS Mixed Content Detector is free to download and use from the official WordPress.org plugin directory.
Is HTTPS Mixed Content Detector safe to use in 2026?
HTTPS Mixed Content Detector works, but test it on a staging site before relying on it in 2026. It runs on 60+ sites, is rated 5/5 and was last updated 12 years ago, and scores 45/100 on our health check.
How many websites use HTTPS Mixed Content Detector?
HTTPS Mixed Content Detector is active on 60+ WordPress websites and has been downloaded 8,602 times since it launched in December 2014. It was downloaded 69 times in the last 30 days.
When was HTTPS Mixed Content Detector last updated?
The latest version, 1.2.0, was released on January 19, 2015 (12 years ago).
Who makes HTTPS Mixed Content Detector?
HTTPS Mixed Content Detector is developed and maintained by Zack Tollman.
What are the best alternatives to HTTPS Mixed Content Detector?
The most popular alternatives to HTTPS Mixed Content Detector are Really Simple Security (3M+ installs), Hostinger Tools (3M+ installs) and SSL Insecure Content Fixer (100K+ installs).
Powered by PageForge
Want thousands of pages that rank like these? Build them in an afternoon.
This directory runs on the same engine as PageForge. Turn any spreadsheet, CSV or API into thousands of fast, SEO-ready WordPress pages — with schema, internal links and AI-written copy baked in.
- CSV, Google Sheets & API data sources
- AI content, schema & internal links per page
- Works with Elementor, Gutenberg, Yoast & Rank Math
- Free on WordPress.org — no credit card

