{"id":17553,"date":"2019-05-06T06:46:04","date_gmt":"2019-05-06T06:46:04","guid":{"rendered":"https:\/\/www.hostinger.com\/tutorials\/?p=17553"},"modified":"2026-03-10T09:30:28","modified_gmt":"2026-03-10T09:30:28","slug":"fix-mixed-content-wordpress","status":"publish","type":"post","link":"\/ca\/tutorials\/fix-mixed-content-wordpress\/","title":{"rendered":"How to fix WordPress mixed content Error using plugins and the .htaccess file"},"content":{"rendered":"

The mixed content warning is a common WordPress error often caused by incorrect Secure Socket Layer (SSL) settings. It indicates that your WordPress website has insecure assets from non-HTTPS URLs.<\/p>

Resolving mixed content warnings on your WordPress site should be a priority. It can harm the user experience and cause search engines to flag your site as unsafe, potentially affecting your rankings. More severe cases can also make your site susceptible to unauthorized tracking and on-path attacks.<\/p>

This tutorial will explore the potential causes of the mixed content error in WordPress and how to identify it. Then, we’ll explain three effective methods to fix mixed content warnings: using a plugin, updating website URLs from HTTP to HTTPS, and modifying the .htaccess<\/strong> file.<\/p>

Download all-in-one WordPress cheat sheet<\/a><\/p>

\n\n\n\n

\n \n \n <\/svg>\n

\n What Is the WordPress Mixed Content Error?\n <\/p>\n <\/div>\n

The WordPress mixed content warning appears when a website serves both secure (HTTPS) and non-secure (HTTP) content due to incorrect SSL settings. To resolve it, you must force WordPress to display all content from secure HTTPS connections, which can be accomplished by using a plugin, updating HTTP links to HTTPS, or modifying the .htaccess file.<\/p><\/div>\n\n\n\n<\/p>

What Causes the Mixed Content Error in WordPress<\/h3>

Enabling HTTPS\/SSL is a common security practice for WordPress websites<\/a>. Setting up a WordPress SSL certificate<\/a> lets you encrypt data between your site and visitors for a secure connection.<\/p>

Many web hosts, including Hostinger, bundle free SSL certificates<\/a> with their hosting plans. Alternatively, you can buy an SSL certificate from a third-party provider and install it yourself.<\/p>

Unfortunately, you may encounter WordPress mixed content warnings even with a valid SSL certificate. They occur when an HTTPS site uses an absolute path to load HTTP scripts. An absolute path specifies the precise location of a directory or file. Here’s an example:<\/p>

http:\/\/domainname.com\/featured-image.jpg<\/pre>
How to Identify the Mixed Content Error in WordPress<\/h2>
The easiest way to spot a mixed content error in WordPress is by looking at your browser’s site address bar. <\/p>
Depending on your browser, a Not secure<\/strong> warning or a broken padlock<\/strong> icon may appear next to your site’s URL with a message saying, “Your connection to this site is not fully secure.<\/strong>”<\/p>
\"A<\/a><\/figure><\/div>
Using Developer tools<\/strong> in the Google Chrome browser, you can identify which assets are loading with the HTTP connection. <\/p>
To access it, click the three vertical dots on Chrome’s top menu bar and choose More tools<\/strong> → Developer tools<\/strong>. Alternatively, press Ctrl+Shift+I<\/strong> for Windows or Linux and Cmd+Option+I<\/strong> for macOS.<\/p>
Open the Console <\/strong>tab in Developer tools <\/strong>to see all the flagged insecure WordPress content on your website.<\/p>
\"Mixed<\/a><\/figure><\/div>
How to Fix the WordPress Mixed Content Error<\/h2>
We will walk you through three possible solutions to debug your WordPress website<\/a> for mixed content errors, starting with the simplest method.<\/p>
How to Fix the WordPress Mixed Content Error Using a Plugin<\/h3>
If you can access your WordPress admin dashboard, install an HTTPS\/SSL plugin to fix the mixed content warning. Many of these plugins offer a free version that has features to resolve insecure content issues with a few clicks.<\/p>
For this tutorial, we’ll show you how to troubleshoot mixed content errors in WordPress using the SSL Insecure Content Fixer<\/a> plugin:<\/p>
    \n
  1. Install and activate SSL Insecure Content Fixer<\/strong> from the WordPress plugin directory. Refer to our article on how to install WordPress plugins<\/a>.<\/li>\n<\/ol>
    \"The<\/a><\/figure><\/div>
      \n
    1. Navigate to Settings<\/strong> → SSL Insecure Content<\/strong> from your admin dashboard to configure the plugin.<\/li>\n\n\n\n
    2. The Fix insecure content<\/strong> field determines the level of fixing that the plugin will apply. The Simple <\/strong>option focuses on scripts, stylesheets, and WordPress media files, which minimizes impact on website performance. Start here and escalate if needed until the warning is resolved.<\/li>\n<\/ol>
      \"The<\/a><\/figure><\/div>
        \n
      1. The HTTPS detection<\/strong> field dictates how your WordPress site identifies HTTPS pages. You can set it to the standard WordPress function<\/strong> or choose another option below it if you’re using a reverse proxy like NGINX<\/a> or Cloudflare CDN<\/a>.<\/li>\n<\/ol>
        \"The<\/a><\/figure><\/div>
          \n
        1. Leave other settings as they are and click Save Changes<\/strong>. <\/li>\n\n\n\n
        2. Visit your WordPress site to check if the mixed content error has been resolved.<\/li>\n<\/ol>
          \"\"<\/a><\/figure>
          How to Fix the WordPress Mixed Content Error by Updating Links<\/h3>
          If an HTTPS\/SSL plugin doesn’t resolve the problem, certain URLs might be hard-coded in your WordPress database or files. In this case, you need to replace all the URLs with HTTPS.<\/p>
          If there are only a couple of insecure links, remove them manually. If there are a lot of them, use a search-and-replace plugin to update all the insecure links in your database tables.<\/p>
          \n            \n                \n                    \n                <\/svg>\n                Important\n            <\/span>\n            
          \n                Important!<\/strong> Backup your WordPress website<\/a> before making any changes to your database.\n            <\/p><\/div>\n\n\n\n<\/p>
          Follow these steps to perform bulk updates in your WordPress database using the Better Search Replace<\/a> plugin:<\/p>
            \n
          1. Install and activate Better Search Replace<\/strong> from the WordPress plugin directory.<\/li>\n<\/ol>
            \"The<\/a><\/figure><\/div>
              \n
            1. Navigate to Tools <\/strong>→ Better Search Replace<\/strong> from your admin dashboard.<\/li>\n\n\n\n
            2. Fill the Search for<\/strong> field with your HTTP website address, and add the HTTPS version to the Replace with<\/strong> field.<\/li>\n\n\n\n
            3. The Select tables<\/strong> field determines which tables to update. Press Ctrl<\/strong> and click each entry to select all the tables.<\/li>\n\n\n\n
            4. Leave additional settings as they are. The form should look like this:<\/li>\n<\/ol>
              \"The<\/a><\/figure><\/div>
                \n
              1. Click Run Search\/Replace<\/strong> to start the update process.<\/li>\n\n\n\n
              2. Since the Dry run<\/strong> mode is on, the plugin will only present its findings. Verify that they are indeed HTTP URLs.<\/li>\n\n\n\n
              3. Deactivate the Dry run <\/strong>mode and rerun the search and replace process.<\/li>\n<\/ol>
                        
                \n            
                \n                \n                    \n                <\/svg>\n                
                \n                    Pro Tip                <\/p>\n            <\/div>\n            
                Clear browser cache<\/a> before testing your WordPress website to ensure it loads the latest data.<\/p>\n                    <\/div>\n        \n\n\n\n<\/p>
                How to Fix the WordPress Mixed Content Error via the .htaccess File<\/h3>
                The final method to address mixed content warnings in WordPress is to force a secure HTTPS connection<\/a> through the .htaccess<\/strong> file. <\/p>
                This file configures various functions for websites hosted on several web servers, including Apache. One key function is to enforce WordPress to redirect visitors from insecure HTTP connections to HTTPS.<\/p>
                You can find or create the .htaccess file<\/a> in your website’s root directory, which houses all the WordPress core files.<\/p>
                This tutorial will show you how to modify .htaccess<\/strong> using Hostinger’s File Manager. However, you can also use an FTP client like FileZilla<\/a>. Here’s how:<\/p>
                  \n
                1. Navigate to Files <\/strong>→ File Manager<\/strong> on hPanel<\/a>.<\/li>\n\n\n\n
                2. Select Access files of yourdomain.com<\/strong> to view that specific website’s files.<\/li>\n<\/ol>
                  The File Manager section in hPanel, with the \"Access Files of yourdomain.com\" option highlighted<\/a><\/figure><\/div>
                    \n
                  1. Double-click on the public_html<\/strong> folder and locate the .htaccess<\/strong> file. Remember, you can create a new one if there isn’t any.<\/li>\n<\/ol>
                    \"The<\/a><\/figure><\/div>
                      \n
                    1. Right-click on the file and select Edit<\/strong>. <\/li>\n\n\n\n
                    2. Paste the following code snippet at the bottom of the file.<\/li>\n<\/ol>
                      RewriteEngine On\nRewriteCond %{HTTPS} !=on\nRewriteRule ^(.*)$ https:\/\/%{HTTP_HOST}%{REQUEST_URI} [L,R=301,NE]\nHeader always set Content-Security-Policy \"upgrade-insecure-requests;\"<\/pre>
                        \n
                      1. Click Save <\/strong>and reload your WordPress site to check if the mixed content errors have been resolved. <\/li>\n<\/ol>
                        If the process is successful, users visiting your website through an insecure HTTP link will be redirected to a secure HTTPS connection.<\/p>
                        \"\"<\/a><\/figure>
                        \n        
                        \n            
                        \n                \n                    \n                <\/svg>\n                
                        \n                    Suggested Reading                <\/p>\n            <\/div>\n            

                        \n                        Do I Need an SSL Certificate? How SSL Can Protect Your Site<\/a>
                        \n                        Types of SSL Certificates: Which One Should You Pick?<\/a>
                        \n                        How to Fix WordPress HTTP Error When Uploading Images<\/a>
                        \n                        How to Improve WordPress Security<\/a>
                        \n<\/p>\n                    <\/div>\n        \n\n\n\n<\/p>
                        Conclusion<\/h2>
                        A mixed content warning can happen after installing an SSL certificate. If left unresolved, it can hurt your SEO and user experience and create vulnerabilities on your website. Therefore, fixing it at the earliest opportunity is essential. <\/p>
                        Thankfully, there are three solutions to fix mixed content errors in WordPress:<\/p>