Flex Plugins

Flex SSL is a lightweight WordPress plugin designed to secure your website by enforcing HTTPS across your entire site. Key features include:
<ul>
<li>Force HTTPS: Automatically redirect all HTTP requests to HTTPS.</li>
<li>Auto-Update URLs: Change WordPress site and home URLs from HTTP to HTTPS.</li>
<li>Cloudflare/Proxy Support: Detects HTTPS headers from Cloudflare or other reverse proxies to avoid redirect loops.</li>
<li>Security Headers: Optionally add HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy. Force SSL Admin when HTTPS is in use.</li>
<li>Mixed Content Fixer: Corrects HTTP to HTTPS in content, excerpts, thumbnails, scripts, styles, content_url, and home_url.</li>
<li>SSL Status: View current SSL status and certificate expiry date.</li>
<li>Redirect Options: Choose between 301 (permanent) and 302 (temporary) redirects.</li>
<li>Logs & Reports: Monitor changes and events in a log system.</li>
<li>Let’s Encrypt Integration (Coming Soon): Plan to automatically generate and renew SSL certificates.</li>
</ul>
<h3>License</h3>
Flex SSL is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 2 of the License, or (at your option) any later version.
For more details, see https://www.gnu.org/licenses/gpl-2.0.html.

Flex SSL

Enables SSL & forces HTTPS on WordPress, updating URLs & adding security headers. Supports reverse proxies & soon integrates Let's Encrypt.

JS Morisset

A simple, safe, and reliable way to force HTTP URLs to HTTPS dynamically:
No setup required – simply activate the plugin to force HTTP URLs to HTTPS.
There are no plugin settings to adjust, and no changes are made to your WordPress configuration.
SIGNIFICANTLY FASTER than other popular plugins of this type:
Other well known plugins use <a href="https://secure.php.net/manual/en/function.ob-start.php" rel="nofollow ugc">PHP’s output buffer</a> to search & replace URLs in the rendered HTML, which is a technique that is error prone and negatively affects caching performance (as changes are not cached).
This plugin uses standard WordPress filters instead of PHP’s output buffer for maximum reliability, performance, caching compatibility, and uses 301 permanent redirects for best SEO results (<a href="https://en.wikipedia.org/wiki/HTTP_301" rel="nofollow ugc">301 redirects are considered best for SEO when moving from HTTP to HTTPS</a>).
Supports advanced proxy / load-balancing HTTP headers:
<ul>
<li><code>X-Forwarded-Proto</code> (aka <code>HTTP_X_FORWARDED_PROTO</code> server value)</li>
<li><code>X-Forwarded-Ssl</code> (aka <code>HTTP_X_FORWARDED_SSL</code> server value)</li>
</ul>
See <a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-Proto" rel="nofollow ugc">Web technology for developers > HTTP > HTTP headers > X-Forwarded-Proto</a> for more details.
<h4>Plugin Requirements</h4>
Your web server must already be configured with an SSL certificate and able to handle HTTPS connections. 😉

JSM Force HTTP to HTTPS / SSL – No Setup, Fast and Reliable

No setup required - simply activate to force HTTP URLs to HTTPS using native WordPress filters and permanent redirects for best SEO.

Flex SSL vs JSM Force HTTP to HTTPS / SSL – No Setup, Fast and Reliable