WordPress index.php seems to perform unwanted redirect 301

It sounds like both Home URL and Site URL for your blog are set to http://test.blog, while your server accepts both http://test.blog and http://www.test.blog. If you access the latter, WordPress will redirect you because of the mismatch. You might be able to set the Home URL and Site URL dynamically in your wp-config.php like this: … Read more

Any any insecure http:// URLs left in wordpress?

Searching for non-SSL references in the code base is a smart idea and you should probably report any you find on hackerone.com (the place to disclose WordPress vulnerabilities). I also suggest you review the WordPress Security page on wordpress.org. To answer your question, I would say WordPress has been audited extensively for various security vulnerabilities … Read more

All content is HTTPS, but browsers warn of HTTP mixed content [closed]

You have “www.wisconsinwetlands.org” URLs redirecting to insecure “http://wisconsinwetlands.org“. The cases you have used these is in the images on the page. Every image that is set as “https://www.” redirects to the insecure version. So while you do need to fix that and correctly configure your setup so that both “www” and non-www URLs are secure, … Read more

WordPress changing script source from https to http

I figured it out. I had a plug-in “WordPress HTTPS” it was forcing all but my woocommerse pages cart and checkout page to be http:. Woocommerse already has a setting to force Cart and Checkout page to be HTTPS so I really did not need the other plug-in, so I deactivated it. I then noticed … Read more