[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkOafNXhiV3ZS0qSAcmuBwuq1x48htl9Jhe6xznr9LTY":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":38,"analysis":142,"fingerprints":922},"auto-install-free-ssl","Auto-Install Free SSL – Generate & Install Free SSL Certificates","4.6.1","Anindya Sundar Mandal","https:\u002F\u002Fprofiles.wordpress.org\u002Fspeedify\u002F","\u003Ch3>Auto-Install Free SSL\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>With over \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fauto-install-free-ssl\u002Freviews\u002F?filter=5\" rel=\"ugc\">380 five-star reviews ⭐⭐⭐⭐⭐\u003C\u002Fa> and a 4.9 out of 5 stars average rating, ‘Auto-Install Free SSL’ empowers you to generate Free SSL Certificates in your WordPress dashboard effortlessly.\u003C\u002Fstrong> This plugin helps secure your website and saves you money.\u003C\u002Fp>\n\u003Cp>Let’s Encrypt™ SSL Certificate is FREE. But they provide it through their API. If you are not a programmer, you need to study and practice programming for years to be able to use the API of Let’s Encrypt™ to generate a single Free SSL Certificate for your WordPress website.\u003C\u002Fp>\n\u003Cp>Here is where ‘Auto-Install Free SSL’ comes into play. This WordPress plugin provides a hassle-free way to obtain and install the Let’s Encrypt™ free SSL certificate for your website. You don’t need programming or coding experience to set it up. With this plugin, you don’t need to spend hours configuring SSL or waste money purchasing SSL certificates. All you need is a few minutes.\u003C\u002Fp>\n\u003Cp>\u003Ciframe loading=\"lazy\" title=\"How to set up Automation in 1 minute (cPanel) | Auto-Install Free SSL [Pro]\" src=\"https:\u002F\u002Fplayer.vimeo.com\u002Fvideo\u002F745390051?dnt=1&app_id=122963\" width=\"750\" height=\"400\" frameborder=\"0\" allow=\"autoplay; fullscreen; picture-in-picture; clipboard-write\">\u003C\u002Fiframe>\u003C\u002Fp>\n\u003Ch3>Minimum System Requirements\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Linux or Windows hosting\u003C\u002Fli>\n\u003Cli>WordPress 4.1\u003C\u002Fli>\n\u003Cli>PHP 5.6\u003C\u002Fli>\n\u003Cli>OpenSSL extension\u003C\u002Fli>\n\u003Cli>Curl extension\u003C\u002Fli>\n\u003Cli>PHP directive allow_url_fopen = On\u003C\u002Fli>\n\u003Cli>The website should be assigned to a domain name (e.g., example.com) accessible online.\u003C\u002Fli>\n\u003Cli>Ensure your web server can serve static files – a standard feature in most web servers.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>FREE PLUGIN FEATURES\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Domain Ownership Verification.\u003C\u002Fli>\n\u003Cli>Generate and renew Free SSL Certificate.\u003C\u002Fli>\n\u003Cli>One-click Download the generated SSL certificate, Private key, and CA Bundle files.\u003C\u002Fli>\n\u003Cli>Video tutorial on cPanel: (1) How to upload HTTP-01 challenge files to verify domain ownership. (2) How to Install the Free SSL Certificate.\u003C\u002Fli>\n\u003Cli>Written tutorial on Plesk for the above two topics.\u003C\u002Fli>\n\u003Cli>One-click Force SSL activation, i.e., HTTPS redirect, fix insecure links and mixed content warning, display the padlock in the browser’s address bar with ONLY ONE CLICK.\u003C\u002Fli>\n\u003Cli>One-click revert to HTTP if required.\u003C\u002Fli>\n\u003Cli>Automatic renewal reminder by email and admin notice before the SSL expiry date.\u003C\u002Fli>\n\u003Cli>Automatic account registration with Let’s Encrypt™.\u003C\u002Fli>\n\u003Cli>Automatic CSR (Certificate Signing Request) generation.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The free https SSL certificate issued by Let’s Encrypt™ expires in 90 days. They recommend renewing 30 days before expiry. Please check the FAQ section to learn why the lifetime is 90 days.\u003C\u002Fp>\n\u003Cp> \u003C\u002Fp>\n\u003Cpre>\u003Ccode> Use this plugin only for HTTPS redirects too. \n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>If your WordPress website has an SSL certificate installed and you are looking ONLY for Force SSL activation (i.e., HTTPS redirect, fix insecure content), you can use the FREE version.\u003C\u002Fp>\n\u003Ch3>PREMIUM PLUGIN FEATURES\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Automatic\u003C\u002Fstrong> Verification of Domain Ownership.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Automatic\u003C\u002Fstrong> Generation of Free SSL Certificate.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Automatic Installation\u003C\u002Fstrong> of Free SSL Security Certificate (cPanel or root access is required for this automation). [However, if you have neither cPanel nor root access, we’ll Install the SSL manually for the first time and provide documentation on how to install SSL manually].\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Automatic Renewal\u003C\u002Fstrong> of Free SSL Certificate (30 days before expiry).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Automatic Cron Job.\u003C\u002Fstrong> No need to set the Cron Job manually.\u003C\u002Fli>\n\u003Cli>Automatic account registration with Let’s Encrypt™.\u003C\u002Fli>\n\u003Cli>Automatic CSR (Certificate Signing Request) generation.\u003C\u002Fli>\n\u003Cli>One-click Force SSL activation.\u003C\u002Fli>\n\u003Cli>One-click revert to HTTP if required.\u003C\u002Fli>\n\u003Cli>One-to-one Premium Support.\u003C\u002Fli>\n\u003Cli>SSL installation training for non-cPanel websites.\u003C\u002Fli>\n\u003Cli>Automatic WildCard SSL certificate for free! (Generation and installation of an SSL certificate for a domain that covers all its sub-domains.)\u003C\u002Fli>\n\u003Cli>Automatically sets the DNS TXT record to verify the domain and generate free wildcard SSL certificates (supported DNS service providers: Cloudflare, Godaddy, Namecheap, and cPanel.)\u003C\u002Fli>\n\u003Cli>Supports Multisite.\u003C\u002Fli>\n\u003Cli>Works on all the websites hosted on a cPanel \u002F web hosting.\u003C\u002Fli>\n\u003Cli>If needed, you can revoke any SSL certificate and change your Let’s Encrypt™ account key.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>(The last five features are available for the unlimited sites license only.)\u003C\u002Fp>\n\u003Cp>If your WordPress website is hosted on a VPS or dedicated server and you don’t have cPanel, \u003Cstrong>Automatic Installation\u003C\u002Fstrong> of the Free SSL Certificate is still possible. Please get in touch with us after purchase.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Ffreessl.tech\u002Ffree-ssl-certificate-for-wordpress-website\u002F?utm_source=wp_org&utm_medium=description&utm_campaign=aifs_free&utm_content=premium_features\" rel=\"nofollow ugc\">BUY PREMIUM VERSION\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Benefits of installing an SSL certificate on your WordPress website\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Cstrong>Protect your users’ data:\u003C\u002Fstrong> If an SSL certificate is installed, your WordPress website’s data travels through the internet with 2048-bit (or more) encryption. No computer or hacker in between can read your users’ encrypted data. Only the intended recipient (users’ browser or your server) can decrypt and read the encrypted data. The data may be credit card-like necessary payment details, user input with a contact form, or a simple login form.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Display PADLOCK:\u003C\u002Fstrong> Installing an SSL certificate is not optional anymore, even if your WordPress website doesn’t accept credit cards. Since July 2018, with version 68, Google Chrome has started to mark all HTTP (no SSL) websites as ‘Not secure’, even if it doesn’t accept user input. All other browsers followed the same path. When users visit an SSL-secured website, all browsers display a secured PADLOCK in the address bar.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Boost the Search Engine Ranking:\u003C\u002Fstrong> Google and other search engines aim to create a secure web. So, search engines now favor SSL-secured HTTPS websites and discourage insecure ones in the search results. If your WordPress website doesn’t have an SSL certificate installed, you are missing something significant regarding SEO and staying away from potential customers.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Gain the trust of your users:\u003C\u002Fstrong> If users see the secured PADLOCK and HTTPS connection in the URL, they are assured that your website is secured. Now you are gaining the trust of your potential customers. They are confident to purchase your product or service.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Documentation\u003C\u002Fh3>\n\u003Cp>Please \u003Ca href=\"https:\u002F\u002Ffreessl.tech\u002Fwordpress-letsencrypt-free-ssl-certificate-documentation\u002F?utm_source=wp_org&utm_medium=description&utm_campaign=aifs_free&utm_content=documentation\" rel=\"nofollow ugc\">click here\u003C\u002Fa> for the documentation.\u003C\u002Fp>\n\u003Ch3>Support and Report a Bug\u003C\u002Fh3>\n\u003Cp>Please check the existing topics in the WordPress \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fauto-install-free-ssl\" rel=\"ugc\">support forum\u003C\u002Fa> before creating a new topic for support or reporting a bug.\u003C\u002Fp>\n\u003Ch3>‘AUTO-INSTALL FREE SSL’ IN YOUR LANGUAGE?\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fauto-install-free-ssl\u002F\" rel=\"nofollow ugc\">Translations can be added easily here\u003C\u002Fa> if you want to translate in your language.\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fletsencrypt.org\" rel=\"nofollow ugc\">Let’s Encrypt™\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>I developed this plugin based on the PHP client\u002Fapp \u003Ca href=\"https:\u002F\u002Ffreessl.tech\u002F?utm_source=wp_org&utm_medium=description&utm_campaign=aifs_free&utm_content=credits\" rel=\"nofollow ugc\">‘FreeSSL.tech Auto’\u003C\u002Fa>, which I developed with a massive rewrite of \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fanalogic\u002Flescript\" rel=\"nofollow ugc\">Lescript\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fcpanel.com\" rel=\"nofollow ugc\">cPanel\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Let’s Encrypt™ is a trademark of the Internet Security Research Group. All rights reserved.\u003C\u002Fp>\n","Generate & install Free SSL Certificates for WordPress, HTTPS redirect, get PADLOCK in the browser, get automatic Renewal Reminders from plugin.",9000,501022,98,397,"2025-12-24T04:33:00.000Z","6.9.4","4.1","5.6",[20,21,22,23,24],"free-ssl","free-ssl-certificate","https-redirect","ssl-certificate","ssl-security","https:\u002F\u002Ffreessl.tech","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fauto-install-free-ssl.4.6.1.zip",100,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},"speedify",1,30,94,"2026-04-04T07:07:52.983Z",[39,61,80,99,121],{"slug":40,"name":41,"version":42,"author":43,"author_profile":44,"description":45,"short_description":46,"active_installs":47,"downloaded":48,"rating":13,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":18,"tags":53,"homepage":57,"download_link":58,"security_score":59,"vuln_count":34,"unpatched_count":28,"last_vuln_date":60,"fetched_at":30},"ssl-zen","SSL Zen — SSL Certificate Installer & HTTPS Redirects","4.7.7","SSL Zen - Free SSL\u002FHTTPS","https:\u002F\u002Fprofiles.wordpress.org\u002Fsslzen\u002F","\u003Ch3>Secure your website with a Free Let’s Encrypt SSL certificate.\u003C\u002Fh3>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FJk86wUqoOco?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fsslzen.com\" rel=\"nofollow ugc\">SSL Zen\u003C\u002Fa> is a ‘Free SSL certificate’ plugin that helps you to secure your website, protect your customer’s data and show your visitors you’re trustworthy and authentic.\u003C\u002Fp>\n\u003Cp>Manually installing a free Let’s Encrypt SSL certificate involves editing SSL configuration files on your web server and troubleshooting issues. With this plugin, you can follow a few steps to get your free Let’s Encrypt SSL certificate. No coding required, no more mixed content, or insecure content warnings. You require no special developer experience to move your HTTP web pages to HTTPS or to force SSL on your website.\u003C\u002Fp>\n\u003Ch4>Features of Free Version:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Generate a free SSL certificate by verifying your domain ownership\u003C\u002Fli>\n\u003Cli>Install the free SSL certificate on your server or cPanel by following our video tutorials\u003C\u002Fli>\n\u003Cli>Renew the free SSL certificate by re-verifying and re-installing the SSL certificate every 90 days\u003C\u002Fli>\n\u003Cli>Settings page that shows your SSL certificate validity duration\u003C\u002Fli>\n\u003Cli>Get an email reminder 30 days before the free SSL certificate expires\u003C\u002Fli>\n\u003Cli>Secure padlock in the browser using Let’s Encrypt™ Free SSL certificate\u003C\u002Fli>\n\u003Cli>SSL certificate is a ranking factor for search engines\u003C\u002Fli>\n\u003Cli>SSL certificate displays information about your domain name and is verified by Let’s Encrypt™\u003C\u002Fli>\n\u003Cli>Enable secure payment processing on websites with SSL certificates\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Note: The free version requires you to manually verify your domain name with \u003Ca href=\"https:\u002F\u002Fletsencrypt.org\" rel=\"nofollow ugc\">Let’s Encrypt\u003C\u002Fa> by uploading a file on your server. You will also need to upload the free SSL certificate on your server and configure them. SSL certificate from Let’s Encrypt is only valid for \u003Ca href=\"https:\u002F\u002Fletsencrypt.org\u002F2015\u002F11\u002F09\u002Fwhy-90-days.html\" rel=\"nofollow ugc\">90 days\u003C\u002Fa> and need to be manually renewed. If you fail to renew your free SSL certificate, your website will start showing a not secure warning to the visitors.\u003C\u002Fp>\n\u003Cp>If you want the plugin to automatically install the SSL certificate and auto-renew it, please check the premium version of the plugin.\u003C\u002Fp>\n\u003Ch4>Features of Premium Version:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Automatic Domain Verification\u003C\u002Fli>\n\u003Cli>Automatic free SSL Certificate Generation\u003C\u002Fli>\n\u003Cli>Automatic free SSL Certificate Installation\u003C\u002Fli>\n\u003Cli>Automatic free SSL Certificate Renewal\u003C\u002Fli>\n\u003Cli>Automatic HTTPS redirection\u003C\u002Fli>\n\u003Cli>Accelerate your website with StackPath’s Global Content Delivery Network\u003C\u002Fli>\n\u003Cli>Premium Support – Live Chat, Email Support\u003C\u002Fli>\n\u003Cli>Spam Protection\u003C\u002Fli>\n\u003Cli>Brute-Force Protection\u003C\u002Fli>\n\u003Cli>Forces Browser Validation on traffic anomalies\u003C\u002Fli>\n\u003Cli>Performs Real-time threat intelligence for IP addresses, source location, and information on malicious IPs.\u003C\u002Fli>\n\u003Cli>Patches known vulnerabilities in the Apache Struts framework by blocking requests suspected of exploiting these vulnerabilities\u003C\u002Fli>\n\u003Cli>Enables a set of rules designed to block common WordPress exploits\u003C\u002Fli>\n\u003Cli>Blocks clients performing multiple injection attacks.\u003C\u002Fli>\n\u003Cli>Blocks Probing and Forced Browsing\u003C\u002Fli>\n\u003Cli>Blocks SQL injection attack attempts\u003C\u002Fli>\n\u003Cli>Blocks Cross-Site-Scripting (XSS) attack attempts\u003C\u002Fli>\n\u003Cli>Blocks Shellshock attack attempts\u003C\u002Fli>\n\u003Cli>Blocks requests suspected of being a Remote File Inclusion attempt\u003C\u002Fli>\n\u003Cli>Blocks requests suspected of a Local File Inclusion attempt\u003C\u002Fli>\n\u003Cli>Blocks attempts to access and potentially harm your servers through backdoors\u003C\u002Fli>\n\u003Cli>Blocks requests suspected of web shell attempts\u003C\u002Fli>\n\u003Cli>Blocks requests suspected of Response header injection attempts\u003C\u002Fli>\n\u003Cli>Blocks Invalid User Agents\u003C\u002Fli>\n\u003Cli>Blocks Unknown User Agents\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fsslzen.com\u002F#pricing\" rel=\"nofollow ugc\">CLICK HERE TO THE BUY PREMIUM VERSION\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Why get an SSL certificate?\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Trust – Starting from July 2018, Google Chrome has begun to mark all non-SSL websites as ‘Not-Secure’. When your users see the broken padlock, their trust wavers!\u003C\u002Fli>\n\u003Cli>Security – SSL certificate provides authentication, trust and compliance. If your customer is filling out forms, or making payments on your website, you need an SSL certificate to protect sensitive data from eavesdroppers.\u003C\u002Fli>\n\u003Cli>SEO – Google ranks SSL-enabled websites higher than unsecured websites. Hence, securing your website also helps get you on top of Google’s search results.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Facing problems with the plugin?\u003C\u002Fh4>\n\u003Cp>We have detailed documentation for the most common issues you might face while installing SSL using our plugin. Please visit our documentation site at \u003Ca href=\"https:\u002F\u002Fdocs.sslzen.com\u002F\" rel=\"nofollow ugc\">docs.sslzen.com\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Please leave a review\u003C\u002Fh4>\n\u003Cp>If our plugin helped you secure your website, please leave a \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fssl-zen\u002Freviews\u002F#new-post\" rel=\"ugc\">review here\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>For more information about our plugin, please visit \u003Ca href=\"https:\u002F\u002Fsslzen.com\" rel=\"nofollow ugc\">sslzen.com\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Want SSL Zen plugin in your language?\u003C\u002Fh4>\n\u003Cp>You can directly translate the plugin in your language \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fssl-zen\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa>\u003Cbr \u002F>\nWhen you add translations, get in touch with us as we will get you listed as a Project Translation Editor for our plugin.\u003C\u002Fp>\n\u003Ch4>Legal:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>By downloading our plugin, You agree to Let’s Encrypt® \u003Ca href=\"https:\u002F\u002Fletsencrypt.org\u002Fdocuments\u002FLE-SA-v1.2-November-15-2017.pdf\" rel=\"nofollow ugc\">Terms of Service\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>By downloading our plugin, You agree to \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fyourivw\u002FLEClient\u002Fblob\u002Fmaster\u002FLICENSE\" rel=\"nofollow ugc\">LEClient license terms\u003C\u002Fa>, a PHP LetsEncrypt client library to verify domain ownership and generate an SSL certificate for your website.\u003C\u002Fli>\n\u003Cli>We use \u003Ca href=\"https:\u002F\u002Fletsdebug.net\u002F\" rel=\"nofollow ugc\">Let’s Debug\u003C\u002Fa> API, a diagnostic tool to help figure out why you might not be able to issue a certificate for Let’s Encrypt®.\u003C\u002Fli>\n\u003Cli>We use \u003Ca href=\"https:\u002F\u002Ffreemius.com\" rel=\"nofollow ugc\">Freemius\u003C\u002Fa> to collect non-sensitive diagnostic data about your website should you opt-in.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Internet Security Research Group™, Let’s Encrypt®, ISRG™ are trademarks of the Internet Security Research Group. StackPath®, EdgeSSL™ are trademarks of StackPath, LLC. All rights reserved.\u003C\u002Fp>\n","Helps install a free Let's Encrypt SSL certificate, redirects HTTP to HTTPS and forces SSL on all pages.",10000,1080506,663,"2025-12-10T11:50:00.000Z","6.6.5","4.2",[20,21,54,55,56],"https","mixed-content","ssl","https:\u002F\u002Fsslzen.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fssl-zen.4.7.7.zip",99,"2024-04-17 00:00:00",{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":69,"downloaded":70,"rating":13,"num_ratings":71,"last_updated":72,"tested_up_to":16,"requires_at_least":73,"requires_php":74,"tags":75,"homepage":77,"download_link":78,"security_score":13,"vuln_count":34,"unpatched_count":28,"last_vuln_date":79,"fetched_at":30},"wp-letsencrypt-ssl","WP Encryption – One Click Free SSL Certificate & SSL \u002F HTTPS Redirect, Security & SSL Scan","7.8.5.11","WP Encryption SSL","https:\u002F\u002Fprofiles.wordpress.org\u002Fgowebsmarty\u002F","\u003Cp>HTTPS Secure your WordPress site with SSL certificate provided by \u003Ca href=\"https:\u002F\u002Fletsencrypt.com\" rel=\"nofollow ugc\">Let’s Encrypt®\u003C\u002Fa> and force SSL \u002F HTTPS sitewide, check your SSL score, fix insecure content & mixed content issues easily. Enable HTTPS secure padlock on your site within minutes.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwpencryption.com\u002F?utm_source=wordpress&utm_medium=description&utm_campaign=wpencryption\" rel=\"nofollow ugc\">WP Encryption\u003C\u002Fa> plugin registers your site, verifies your domain, generates SSL certificate for your site in simple mouse clicks without the need of any technical knowledge. A typical SSL installation without WP Encryption would require you to generate CSR, prove domain ownership, provide your bussiness data and deal with many more technical tasks!.\u003C\u002Fp>\n\u003Ch3>PRO FEATURES WORTH UPGRADING\u003C\u002Fh3>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FjrkFwFH7r6o?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Automatic domain verification\u003C\u002Fli>\n\u003Cli>Automatic SSL certificate installation\u003C\u002Fli>\n\u003Cli>Automatic SSL renewal (Auto renews SSL certificate 30 days prior to expiry date)\u003C\u002Fli>\n\u003Cli>Wildcard SSL support – Install Wildcard SSL certificate for your primary domain that covers ALL sub-domains. Automatic DNS based domain verification for Wildcard SSL installation (DNS should be managed by cPanel or Godaddy)\u003C\u002Fli>\n\u003Cli>Multisite + Mapped domains support – Supports SSL installation for mapped domains\u003C\u002Fli>\n\u003Cli>Advanced security headers & SSL monitoring\u003C\u002Fli>\n\u003Cli>Top notch one to one priority support – Live Chat, Email, Premium Support Forum\u003C\u002Fli>\n\u003Cli>SSL installation help for non-cPanel sites\u003C\u002Fli>\n\u003Cli>Login security via passkeys (powered by WebAuthn) – No passwords. No brute force. Log in with passkeys protected by your browser or password manager — fast, secure, and frictionless.\u003C\u002Fli>\n\u003Cli>Automated daily vulnerability scanning & reporting.\u003C\u002Fli>\n\u003Cli>Automated daily malware & integrity scan\u003C\u002Fli>\n\u003Cli>Instant notification for threats & security issues\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwpencryption.com\u002F?utm_source=wordpress&utm_medium=premiumfeatures&utm_campaign=wpencryption\" rel=\"nofollow ugc\">BUY PREMIUM VERSION\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>5M+ SSL certificates generated – Switch to HTTPS easily\u003C\u002Fh3>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FaKvvVlAlZ14?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch3>FREE SSL PLUGIN FEATURES\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Unlock every premium feature other plugins charge for — absolutely Free.\u003C\u002Fli>\n\u003Cli>Verify domain ownership and generate free SSL certificate\u003C\u002Fli>\n\u003Cli>Secure webmail and email with HTTPS\u003C\u002Fli>\n\u003Cli>Download generated SSL certificate, key and Intermediate certificate files\u003C\u002Fli>\n\u003Cli>Force HTTPS \u002F Enable HTTPS with 301 htaccess redirection sitewide in one click\u003C\u002Fli>\n\u003Cli>HTTPS redirection includes redirect loop fix for Cloudflare, StackPath, Load balancers and reverse proxies.\u003C\u002Fli>\n\u003Cli>SSL Health page – Track your SSL score and control various SSL & Security features like HSTS strict transport security Header, HttpOnly secure cookies, etc,.\u003C\u002Fli>\n\u003Cli>Enable important security headers including X-XSS-Protection, X-Content-Type-Options, Referrer-Policy\u003C\u002Fli>\n\u003Cli>Enable mixed content \u002F insecure content fixer\u003C\u002Fli>\n\u003Cli>SSL monitoring & Automatic email notification prior to SSL certificate expiration\u003C\u002Fli>\n\u003Cli>Advanced security features – stop user enumeration, disable file editing, hide login error, hide wp version and much more\u003C\u002Fli>\n\u003Cli>Security score & security scanners including malware & integrity scanner, vulnerability scanner.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>(Optional) Running WordPress on a specialized VPS\u002FDedicated server without cPanel? You can download the generated SSL certificate files easily via “Download SSL Certificates” page and install it on your server by modifying server config file via SSH access as explained in our \u003Ca href=\"https:\u002F\u002Fwpencryption.com\u002Fdocs\u002F\" rel=\"nofollow ugc\">DOCS\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>(7.8.0) NEW ADVANCED SECURITY PAGE WITH INTEGRITY SCAN & MALWARE SCAN\u003C\u002Fh3>\n\u003Cp>Discover the brand-new ‘Advanced Security & Scanner’ page — your command center for the most powerful protection your WordPress site has ever seen. Run malware and integrity scans to detect modified, additional, or suspicious files in your installation. Stay ahead of threats and keep your security score at its peak.\u003C\u002Fp>\n\u003Ch3>ADVANCED HTTP SECURITY HEADERS\u003C\u002Fh3>\n\u003Cp>Safeguard your site from cross-site scripting attacks, clickjacking, MIME sniffing attacks.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Enable HTTPS Strict Transport Security Header to avoid request protocol downgrading\u003C\u002Fli>\n\u003Cli>Disable directory listing to avoid directory traversing\u003C\u002Fli>\n\u003Cli>Enable X-XSS protection, secure cookies, X-Content-Type-Options to avoid cross site scripting and MIME sniffing\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Switch to HTTPS in seconds\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>Secure HTTPS browser padlock in minutes.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Free domain validated (DV) SSL certificates are provided by Let’s Encrypt (A non profit Global certificate Authority).\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>SSL encryption ensures protection against man-in-middle attacks by securely encrypting the data transfer between client and your server.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Optimized for Cloudflare and Reverse Proxies\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>Forcing HTTPS using the .htaccess method prevents redirect loops when your site is behind Cloudflare.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Compatible with reverse proxies and load balancers — avoids redirection conflicts.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Top Reasons Your WordPress Site Needs an SSL Certificate\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>SEO Benefit: Major search engines like Google ranks SSL enabled sites higher compared to non SSL sites. Thus bringing more organic traffic for your site.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Data Encryption: Data transmission between server and visitor are securely encrypted on a SSL site thus avoiding any data hijacks in-between the transmission(Ex: personal information, credit card information).\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Trust: Google chrome shows non-SSL sites as ‘insecure’, bringing a feel of insecurity in website visitors.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Authentic: HTTPS green padlock represents symbol of trust, authenticity and security.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>REQUIREMENTS\u003C\u002Fh4>\n\u003Cp>Linux hosting, OpenSSL, CURL, allow_url_fopen should be enabled.\u003C\u002Fp>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cp>Many thanks to the generous efforts of our translators.\u003C\u002Fp>\n\u003Cp>If you would like to translate plugin to your language, \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fwp-letsencrypt-ssl\u002F\" rel=\"nofollow ugc\">Feel free to sign up and start translating!\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Show Your Support\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>If you find any issue, please submit a bug via support forum.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>LOVE WP ENCRYPTION SSL PLUGIN?\u003C\u002Fh3>\n\u003Cp>If you find this plugin useful, please leave a \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fwp-letsencrypt-ssl\u002Freviews\u002F\" rel=\"ugc\">positive review\u003C\u002Fa>. Your reviews are our biggest motivation for further development of plugin.\u003C\u002Fp>\n\u003Ch3>Disclaimer\u003C\u002Fh3>\n\u003Cp>WP Encryption uses SSLLabs API for SSL scan & detection. By using the plugin, you agree to terms & conditions of \u003Ca href=\"https:\u002F\u002Fwww.ssllabs.com\u002Fdownloads\u002FQualys_SSL_Labs_Terms_of_Use.pdf\" rel=\"nofollow ugc\">SSLLabs\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>By enabling the Vulnerability Scan feature, you agree to terms & conditions of \u003Ca href=\"https:\u002F\u002Fvulnerability.wpsysadmin.com\" rel=\"nofollow ugc\">WPVulnerability Database API\u003C\u002Fa>. The information provided by the information database comes from different sources that have been reviewed by third parties. There is no liability of any kind for the information.\u003C\u002Fp>\n\u003Cp>Security is an important subject regarding SSL\u002FTLS certificates, of course. It is obvious that your private key, stored on your web server, should never be accessible from the web. When the plugin created the keys directory for the first time, it will store a .htaccess file in this directory, denying all visitors. Always make sure yourself your keys aren’t accessible from the web! We are in no way responsible if your private keys go public. If this does happen, the easiest solution is to check folder permissions on your server and make sure public access is forbidden for root folders. Next, create a new certificate.\u003C\u002Fp>\n","Lifetime SSL solution - Free SSL certificate & HTTPS redirect, resolve insecure site, fix SSL errors, SSL score, SSL monitoring, really simple setup.",50000,3043225,1128,"2026-03-12T07:29:00.000Z","5.4","7.0",[76,20,54,22,56],"force-https","https:\u002F\u002Fwpencryption.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-letsencrypt-ssl.7.8.5.11.zip","2024-04-09 00:00:00",{"slug":81,"name":82,"version":83,"author":84,"author_profile":85,"description":86,"short_description":87,"active_installs":88,"downloaded":89,"rating":36,"num_ratings":90,"last_updated":91,"tested_up_to":16,"requires_at_least":92,"requires_php":93,"tags":94,"homepage":96,"download_link":97,"security_score":59,"vuln_count":34,"unpatched_count":28,"last_vuln_date":98,"fetched_at":30},"wp-force-ssl","WP Force SSL & HTTPS SSL Redirect","1.68","WebFactory","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebfactory\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fwpforcessl.com\u002F?ref=wporg\" rel=\"nofollow ugc\">WP Force SSL\u003C\u002Fa> helps you redirect insecure HTTP traffic to secure HTTPS and fix SSL errors \u003Cstrong>without touching any code\u003C\u002Fstrong>. Activate Force SSL and everything will be set and SSL enabled. The entire site will move to HTTPS using your SSL certificate. It works with any SSL certificate. It can be free SSL certificate from Let’s Encrypt or a paid SSL certificate.\u003C\u002Fp>\n\u003Cp>How to add SSL & enable SSL? Most hosting companies support the free SSL certificate from Let’s Encrypt, so login to your hosting panel and add SSL certificate. You’ll see a button labeled “Add SSL Certificate” or “Add Let’s Encrypt Certificate” and after that it’s 1 click to have the SSL enabled on your site with WP Force SSL. If that doesn’t work get \u003Ca href=\"https:\u002F\u002Fwpforcessl.com\u002F\" rel=\"nofollow ugc\">WP Force SSL PRO\u003C\u002Fa> and it’ll generate free SSL certificate for your site. And will regenerate SSL certificate every 90 days.\u003C\u002Fp>\n\u003Cp>Access WP Force SSL settings via the main Settings menu -> WP Force SSL.\u003C\u002Fp>\n\u003Ch4>SSL Tests available in the plugin\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>is site on localhost?\u003C\u002Fli>\n\u003Cli>check SSL certificate\u003C\u002Fli>\n\u003Cli>check SSL certificate expiry date\u003C\u002Fli>\n\u003Cli>is latest version of Force SSL used?\u003C\u002Fli>\n\u003Cli>are known incompatible SSL plugins active?\u003C\u002Fli>\n\u003Cli>is WP address URL set for SSL?\u003C\u002Fli>\n\u003Cli>is WP home URL set for SSL?\u003C\u002Fli>\n\u003Cli>is SSL monitoring enabled (pro feature)\u003C\u002Fli>\n\u003Cli>is HTTPS redirection working?\u003C\u002Fli>\n\u003Cli>is file redirection working (pro feature)\u003C\u002Fli>\n\u003Cli>is HSTS enabled?\u003C\u002Fli>\n\u003Cli>check mixed-content issue (pro feature)\u003C\u002Fli>\n\u003Cli>is htaccess available & writable?\u003C\u002Fli>\n\u003Cli>is 404 redirection enabled (pro feature)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Settings\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>redirect HTTP to HTTPS\u003C\u002Fli>\n\u003Cli>fix mixed-content (pro)\u003C\u002Fli>\n\u003Cli>enable HSTS\u003C\u002Fli>\n\u003Cli>force secure cookies (pro)\u003C\u002Fli>\n\u003Cli>cross-site scripting protection (pro)\u003C\u002Fli>\n\u003Cli>expect CT header\u003C\u002Fli>\n\u003Cli>X-Frame options\u003C\u002Fli>\n\u003Cli>show WP Force SSL menu in admin bar\u003C\u002Fli>\n\u003Cli>show WP Force SSL widget in admin dashboard\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>SSL certificate testing tool\u003C\u002Fh4>\n\u003Cp>WP Force SSL comes with an SSL certificate testing tool. It tests if the SSL certificate is valid, properly installed & up-to date.\u003C\u002Fp>\n\u003Ch4>Need support?\u003C\u002Fh4>\n\u003Cp>We’re here for you! Things get frustrating when they don’t work so make sure you \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fwp-force-ssl\u002F\" rel=\"ugc\">open a support topic\u003C\u002Fa> in the official Force SSL forum. We answer all questions within a few hours!\u003C\u002Fp>\n\u003Ch4>External Assets\u003C\u002Fh4>\n\u003Cp>A big thank you to \u003Ca href=\"https:\u002F\u002Fsweetalert2.github.io\u002F\" rel=\"nofollow ugc\">SweetAlert2\u003C\u002Fa> authors which we use to make alerts nicer. And to \u003Ca href=\"https:\u002F\u002Fdepositphotos.com\u002F248496280\u002Fstock-illustration-online-payment-protection-system-concept.html\" rel=\"nofollow ugc\">DepositPhotos\u003C\u002Fa> for the lovely header image.\u003C\u002Fp>\n","Enable SSL & HTTPS redirect with 1 click! Add SSL certificate & WP Force SSL to redirect site from HTTP to HTTPS & fix SSL errors.",90000,1746375,179,"2025-12-03T20:17:00.000Z","4.6","5.2",[95,54,55,56,23],"force-ssl","https:\u002F\u002Fwpforcessl.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-force-ssl.1.68.zip","2024-06-07 00:00:00",{"slug":100,"name":101,"version":102,"author":103,"author_profile":104,"description":105,"short_description":106,"active_installs":107,"downloaded":108,"rating":109,"num_ratings":110,"last_updated":111,"tested_up_to":112,"requires_at_least":113,"requires_php":114,"tags":115,"homepage":118,"download_link":119,"security_score":59,"vuln_count":34,"unpatched_count":28,"last_vuln_date":120,"fetched_at":30},"wp-free-ssl","WP Free SSL","1.2.8","prasadkirpekar","https:\u002F\u002Fprofiles.wordpress.org\u002Fprasadkirpekar\u002F","\u003Ch3>Get free SSL certificate for WordPress in minutes\u003C\u002Fh3>\n\u003Cp>Do you run ecommerce website? Or You run awesome blog that needs to be secured with SSL certificate. You dont need to spend lot of money on SSL certificate from different services.\u003Cbr \u002F>\nGet free SSL certificate with this plugin install the plugin and issue the SSL certificate for your website. You can download the certificate afterward and install it on server.\u003Cbr \u002F>\nSSL certificate is issued from LetsEncrypt and is completely valid. SSL certificate will help to imporve your search ranking too.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>One-click conversion HTTP to HTTPS of WordPress\u003C\u002Fstrong>\u003Cbr \u002F>\nOn prior coding skill is requied, Just install the plugin and you are just 5 min away from being secured\u003C\u002Fp>\n\u003Ch4>WordPress FREE SSL Plugin Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>One click a Free SSL certificate by verifying your domain ownership.\u003C\u002Fli>\n\u003Cli>Support all subdomains\u003C\u002Fli>\n\u003Cli>Redirect HTTP to HTTPS with a simple setting.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>How to install WP Free SSL?\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Install WP Free SSL\u003C\u002Fli>\n\u003Cli>Activate Plugin.\u003C\u002Fli>\n\u003Cli>Goto settings and run installation of ssl\u003C\u002Fli>\n\u003Cli>Save settings\u003C\u002Fli>\n\u003Cli>And you done!\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Contact me\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"mailto:prasadkirpekar@outlook.com\" rel=\"nofollow ugc\">Reach me here\u003C\u002Fa>\u003C\u002Fp>\n","One click free SSL certificate and Force HTTPS",1000,44020,92,22,"2025-07-27T04:20:00.000Z","6.8.5","3.0.1","",[116,54,117,56,23],"free","secured","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-free-ssl\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-free-ssl.1.2.8.zip","2024-09-24 00:00:00",{"slug":122,"name":123,"version":124,"author":125,"author_profile":126,"description":127,"short_description":128,"active_installs":129,"downloaded":130,"rating":27,"num_ratings":131,"last_updated":132,"tested_up_to":133,"requires_at_least":134,"requires_php":114,"tags":135,"homepage":139,"download_link":140,"security_score":141,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"nertworks-site-wide-ssl","NertWorks Site Wide SSL","1.05","nertworks","https:\u002F\u002Fprofiles.wordpress.org\u002Fnertworks\u002F","\u003Cp>Enforce SSL throughout the entire site. Supporting multiple methods. Can be used on the Front End of the site of the Admin Dashboard\u003C\u002Fp>\n\u003Ch3>A brief Markdown\u003C\u002Fh3>\n\u003Cp>Ordered list:\u003C\u002Fp>\n\u003Col>\n\u003Cli>javascript redirection supported\u003C\u002Fli>\n\u003Cli>PHP redirection supported\u003C\u002Fli>\n\u003Cli>WP redirection supported\u003C\u002Fli>\n\u003Cli>Includes diagnostic tools \u003C\u002Fli>\n\u003Cli>Supports Dashboard and website redirection\u003C\u002Fli>\n\u003C\u002Fol>\n","Enforce SSL throughout the entire site. Supporting multiple methods. Can be used on the Front End of the site of the Admin Dashboard",20,3545,2,"2014-06-14T19:07:00.000Z","3.4.2","2.0",[136,22,137,138,56],"https-enforce","redirect-to-ssl-site","security-certificate","http:\u002F\u002Fnertworks.com\u002F?p=433","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnertworks-site-wide-ssl.zip",85,{"attackSurface":143,"codeSignals":281,"taintFlows":670,"riskAssessment":907,"analyzedAt":921},{"hooks":144,"ajaxHandlers":265,"restRoutes":270,"shortcodes":271,"cronEvents":272,"entryPointCount":34,"unprotectedCount":34},[145,151,155,159,164,167,173,177,181,185,189,193,197,200,203,207,211,214,218,222,226,230,233,235,239,243,247,251,254,257,261],{"type":146,"name":147,"callback":148,"file":149,"line":150},"action","aifs_display_review_init","aifs_set_display_review_option","auto-install-free-ssl.php",624,{"type":146,"name":152,"callback":153,"file":149,"line":154},"aifs_display_announcement_init","aifs_set_display_announcement_option",634,{"type":146,"name":156,"callback":157,"file":149,"line":158},"aifs_display_discount_offer_init","aifs_set_display_discount_offer_option",644,{"type":146,"name":160,"callback":161,"priority":162,"file":149,"line":163},"admin_notices","aifs_display_flash_notices",12,670,{"type":146,"name":165,"callback":165,"file":149,"line":166},"aifs_do_this_daily",718,{"type":168,"name":169,"callback":170,"priority":171,"file":149,"line":172},"filter","is_submenu_visible","aifs_is_submenu_visible",10,885,{"type":168,"name":174,"callback":175,"file":149,"line":176},"uninstall_reasons","aifs_deactivation_text",917,{"type":146,"name":178,"callback":179,"file":149,"line":180},"after_uninstall","aifs_uninstall_cleanup",990,{"type":146,"name":182,"callback":183,"file":149,"line":184},"admin_init","aifs_do_output_buffer",995,{"type":146,"name":186,"callback":187,"file":149,"line":188},"admin_menu","aifs_home_menu",997,{"type":146,"name":190,"callback":191,"file":149,"line":192},"init","aifs_load_textdomain",999,{"type":146,"name":194,"callback":195,"file":149,"line":196},"admin_enqueue_scripts","aifs_add_js_enqueue",1007,{"type":146,"name":194,"callback":198,"file":149,"line":199},"aifs_admin_styles",1008,{"type":146,"name":182,"callback":201,"file":149,"line":202},"aifs_download_file_handler",1009,{"type":168,"name":204,"callback":205,"file":149,"line":206},"checkout\u002Fparameters","closure",1020,{"type":146,"name":160,"callback":208,"file":209,"line":210},"aifs_display_admin_notice","FreeSSLAuto\\src\\Admin\\AdminNotice.php",102,{"type":146,"name":182,"callback":212,"file":209,"line":213},"aifs_admin_notice_handler",106,{"type":146,"name":186,"callback":215,"file":216,"line":217},"force_https_page_menu","FreeSSLAuto\\src\\Admin\\ForceHttpsPage.php",52,{"type":146,"name":182,"callback":219,"file":220,"line":221},"aifs_force_ssl_controller","FreeSSLAuto\\src\\Admin\\ForceSSL.php",64,{"type":146,"name":223,"callback":224,"file":220,"line":225},"wp","revert_force_ssl",67,{"type":146,"name":227,"callback":228,"priority":129,"file":220,"line":229},"wp_loaded","force_ssl",69,{"type":146,"name":182,"callback":231,"priority":27,"file":220,"line":232},"start_buffer_wp",72,{"type":146,"name":190,"callback":231,"file":220,"line":234},74,{"type":146,"name":236,"callback":237,"priority":192,"file":220,"line":238},"shutdown","end_buffer_wp",76,{"type":146,"name":240,"callback":241,"file":220,"line":242},"wp_print_scripts","force_ssl_javascript",126,{"type":146,"name":223,"callback":244,"priority":245,"file":220,"line":246},"force_ssl_wp",40,129,{"type":146,"name":186,"callback":248,"file":249,"line":250},"add_generate_ssl_manually_menu","FreeSSLAuto\\src\\Admin\\GenerateSSLmanually.php",80,{"type":146,"name":182,"callback":252,"file":249,"line":253},"generate_ssl_manually_page_init",81,{"type":146,"name":182,"callback":255,"file":249,"line":256},"download_http01_challenge_file_handler",82,{"type":146,"name":194,"callback":258,"file":259,"line":260},"countdown_js_script","FreeSSLAuto\\src\\Admin\\HomeOptions.php",53,{"type":146,"name":186,"callback":262,"file":263,"line":264},"log_page_menu","FreeSSLAuto\\src\\Admin\\Log.php",54,[266],{"action":267,"nopriv":268,"callback":267,"hasNonce":268,"hasCapCheck":268,"file":149,"line":269},"aifs_update_option",false,721,[],[],[273,275,277,279],{"hook":165,"callback":165,"file":149,"line":274},215,{"hook":147,"callback":147,"file":209,"line":276},473,{"hook":152,"callback":152,"file":209,"line":278},492,{"hook":156,"callback":156,"file":209,"line":280},520,{"dangerousFunctions":282,"sqlUsage":283,"outputEscaping":285,"fileOperations":663,"externalRequests":286,"nonceChecks":664,"capabilityChecks":131,"bundledLibraries":665},[],{"prepared":28,"raw":28,"locations":284},[],{"escaped":286,"rawEcho":287,"locations":288},9,196,[289,292,294,296,298,299,301,303,305,307,309,311,313,315,317,319,321,323,325,327,329,331,332,334,336,338,340,342,344,346,348,350,352,354,356,357,359,361,363,365,367,369,371,373,374,375,377,379,380,382,384,386,388,390,392,394,395,397,398,400,402,403,405,406,408,409,411,413,414,416,418,420,422,424,426,428,430,431,433,435,437,439,441,442,444,446,448,450,452,454,456,458,460,462,464,466,468,470,472,474,476,478,480,482,484,486,487,489,491,493,495,497,499,501,503,505,507,509,511,513,515,517,519,521,523,525,527,529,531,533,535,537,539,541,543,545,547,549,551,553,555,557,559,560,562,564,566,567,569,571,573,575,577,579,581,583,585,587,589,590,592,594,596,598,600,602,604,606,608,610,612,614,616,618,620,622,624,626,628,630,632,634,636,638,640,642,644,646,648,649,651,653,655,657,659,661],{"file":209,"line":290,"context":291},256,"raw output",{"file":209,"line":293,"context":291},294,{"file":209,"line":295,"context":291},375,{"file":209,"line":297,"context":291},446,{"file":216,"line":213,"context":291},{"file":216,"line":300,"context":291},111,{"file":216,"line":302,"context":291},120,{"file":216,"line":304,"context":291},123,{"file":220,"line":306,"context":291},150,{"file":249,"line":308,"context":291},161,{"file":249,"line":310,"context":291},182,{"file":249,"line":312,"context":291},202,{"file":249,"line":314,"context":291},207,{"file":249,"line":316,"context":291},213,{"file":249,"line":318,"context":291},225,{"file":249,"line":320,"context":291},228,{"file":249,"line":322,"context":291},236,{"file":249,"line":324,"context":291},245,{"file":249,"line":326,"context":291},247,{"file":249,"line":328,"context":291},254,{"file":249,"line":330,"context":291},255,{"file":249,"line":290,"context":291},{"file":249,"line":333,"context":291},279,{"file":249,"line":335,"context":291},280,{"file":249,"line":337,"context":291},288,{"file":249,"line":339,"context":291},331,{"file":249,"line":341,"context":291},337,{"file":249,"line":343,"context":291},349,{"file":249,"line":345,"context":291},358,{"file":249,"line":347,"context":291},359,{"file":249,"line":349,"context":291},376,{"file":249,"line":351,"context":291},388,{"file":249,"line":353,"context":291},394,{"file":249,"line":355,"context":291},539,{"file":249,"line":355,"context":291},{"file":249,"line":358,"context":291},540,{"file":249,"line":360,"context":291},546,{"file":249,"line":362,"context":291},547,{"file":249,"line":364,"context":291},548,{"file":249,"line":366,"context":291},549,{"file":249,"line":368,"context":291},550,{"file":249,"line":370,"context":291},553,{"file":249,"line":372,"context":291},556,{"file":249,"line":372,"context":291},{"file":249,"line":372,"context":291},{"file":249,"line":376,"context":291},567,{"file":249,"line":378,"context":291},570,{"file":249,"line":378,"context":291},{"file":249,"line":381,"context":291},800,{"file":249,"line":383,"context":291},803,{"file":249,"line":385,"context":291},806,{"file":249,"line":387,"context":291},982,{"file":249,"line":389,"context":291},986,{"file":249,"line":391,"context":291},987,{"file":249,"line":393,"context":291},994,{"file":249,"line":184,"context":291},{"file":249,"line":396,"context":291},1006,{"file":249,"line":202,"context":291},{"file":249,"line":399,"context":291},1011,{"file":249,"line":401,"context":291},1016,{"file":249,"line":401,"context":291},{"file":249,"line":404,"context":291},1018,{"file":249,"line":404,"context":291},{"file":249,"line":407,"context":291},1022,{"file":249,"line":407,"context":291},{"file":249,"line":410,"context":291},1037,{"file":249,"line":412,"context":291},1053,{"file":249,"line":412,"context":291},{"file":249,"line":415,"context":291},1058,{"file":249,"line":417,"context":291},1068,{"file":249,"line":419,"context":291},1073,{"file":249,"line":421,"context":291},1088,{"file":249,"line":423,"context":291},1090,{"file":249,"line":425,"context":291},1092,{"file":249,"line":427,"context":291},1104,{"file":249,"line":429,"context":291},1107,{"file":249,"line":429,"context":291},{"file":249,"line":432,"context":291},1112,{"file":249,"line":434,"context":291},1113,{"file":249,"line":436,"context":291},1114,{"file":249,"line":438,"context":291},1121,{"file":249,"line":440,"context":291},1123,{"file":249,"line":440,"context":291},{"file":249,"line":443,"context":291},1134,{"file":249,"line":445,"context":291},1217,{"file":249,"line":447,"context":291},1227,{"file":249,"line":449,"context":291},1230,{"file":249,"line":451,"context":291},1369,{"file":249,"line":453,"context":291},1375,{"file":249,"line":455,"context":291},1377,{"file":249,"line":457,"context":291},1381,{"file":249,"line":459,"context":291},1384,{"file":249,"line":461,"context":291},1403,{"file":259,"line":463,"context":291},246,{"file":259,"line":465,"context":291},251,{"file":259,"line":467,"context":291},269,{"file":259,"line":469,"context":291},281,{"file":259,"line":471,"context":291},285,{"file":259,"line":473,"context":291},300,{"file":259,"line":475,"context":291},301,{"file":259,"line":477,"context":291},303,{"file":259,"line":479,"context":291},352,{"file":259,"line":481,"context":291},355,{"file":259,"line":483,"context":291},367,{"file":259,"line":485,"context":291},370,{"file":259,"line":295,"context":291},{"file":259,"line":488,"context":291},378,{"file":259,"line":490,"context":291},381,{"file":259,"line":492,"context":291},386,{"file":259,"line":494,"context":291},389,{"file":259,"line":496,"context":291},392,{"file":259,"line":498,"context":291},400,{"file":259,"line":500,"context":291},404,{"file":259,"line":502,"context":291},409,{"file":259,"line":504,"context":291},414,{"file":259,"line":506,"context":291},420,{"file":259,"line":508,"context":291},424,{"file":259,"line":510,"context":291},429,{"file":259,"line":512,"context":291},434,{"file":259,"line":514,"context":291},440,{"file":259,"line":516,"context":291},444,{"file":259,"line":518,"context":291},449,{"file":259,"line":520,"context":291},454,{"file":259,"line":522,"context":291},460,{"file":259,"line":524,"context":291},464,{"file":259,"line":526,"context":291},466,{"file":259,"line":528,"context":291},471,{"file":259,"line":530,"context":291},476,{"file":259,"line":532,"context":291},486,{"file":259,"line":534,"context":291},490,{"file":259,"line":536,"context":291},495,{"file":259,"line":538,"context":291},497,{"file":259,"line":540,"context":291},502,{"file":259,"line":542,"context":291},504,{"file":259,"line":544,"context":291},513,{"file":259,"line":546,"context":291},517,{"file":259,"line":548,"context":291},522,{"file":259,"line":550,"context":291},524,{"file":259,"line":552,"context":291},529,{"file":259,"line":554,"context":291},531,{"file":259,"line":556,"context":291},541,{"file":259,"line":558,"context":291},545,{"file":259,"line":368,"context":291},{"file":259,"line":561,"context":291},555,{"file":259,"line":563,"context":291},557,{"file":259,"line":565,"context":291},563,{"file":259,"line":376,"context":291},{"file":259,"line":568,"context":291},572,{"file":259,"line":570,"context":291},577,{"file":259,"line":572,"context":291},583,{"file":259,"line":574,"context":291},587,{"file":259,"line":576,"context":291},592,{"file":259,"line":578,"context":291},597,{"file":259,"line":580,"context":291},603,{"file":259,"line":582,"context":291},607,{"file":259,"line":584,"context":291},609,{"file":259,"line":586,"context":291},614,{"file":259,"line":588,"context":291},621,{"file":259,"line":154,"context":291},{"file":259,"line":591,"context":291},638,{"file":259,"line":593,"context":291},643,{"file":259,"line":595,"context":291},648,{"file":259,"line":597,"context":291},658,{"file":259,"line":599,"context":291},662,{"file":259,"line":601,"context":291},667,{"file":259,"line":603,"context":291},672,{"file":259,"line":605,"context":291},679,{"file":259,"line":607,"context":291},683,{"file":259,"line":609,"context":291},688,{"file":259,"line":611,"context":291},693,{"file":259,"line":613,"context":291},707,{"file":259,"line":615,"context":291},709,{"file":259,"line":617,"context":291},712,{"file":259,"line":619,"context":291},714,{"file":259,"line":621,"context":291},717,{"file":259,"line":623,"context":291},719,{"file":259,"line":625,"context":291},729,{"file":259,"line":627,"context":291},741,{"file":259,"line":629,"context":291},744,{"file":259,"line":631,"context":291},867,{"file":259,"line":633,"context":291},877,{"file":259,"line":635,"context":291},882,{"file":259,"line":637,"context":291},884,{"file":259,"line":639,"context":291},886,{"file":259,"line":641,"context":291},887,{"file":259,"line":643,"context":291},891,{"file":259,"line":645,"context":291},893,{"file":259,"line":647,"context":291},922,{"file":263,"line":27,"context":291},{"file":263,"line":650,"context":291},115,{"file":263,"line":652,"context":291},130,{"file":263,"line":654,"context":291},143,{"file":263,"line":656,"context":291},148,{"file":263,"line":658,"context":291},162,{"file":263,"line":660,"context":291},165,{"file":263,"line":662,"context":291},199,31,17,[666],{"name":667,"version":668,"knownCves":669},"Freemius","1.0",[],[671,695,705,718,726,736,747,768,786,797,811,819,832,845,856,867,881,896],{"entryPoint":672,"graph":673,"unsanitizedCount":34,"severity":694},"aifs_download_file_handler (auto-install-free-ssl.php:725)",{"nodes":674,"edges":691},[675,680,684],{"id":676,"type":677,"label":678,"file":149,"line":679},"n0","source","$_GET",740,{"id":681,"type":682,"label":683,"file":149,"line":679},"n1","transform","→ download_file()",{"id":685,"type":686,"label":687,"file":688,"line":689,"wp_function":690},"n2","sink","header() [Header Injection]","FreeSSLAuto\\src\\Admin\\Factory.php",788,"header",[692,693],{"from":676,"to":681,"sanitized":268},{"from":681,"to":685,"sanitized":268},"medium",{"entryPoint":696,"graph":697,"unsanitizedCount":34,"severity":694},"\u003Cauto-install-free-ssl> (auto-install-free-ssl.php:0)",{"nodes":698,"edges":702},[699,700,701],{"id":676,"type":677,"label":678,"file":149,"line":679},{"id":681,"type":682,"label":683,"file":149,"line":679},{"id":685,"type":686,"label":687,"file":688,"line":689,"wp_function":690},[703,704],{"from":676,"to":681,"sanitized":268},{"from":681,"to":685,"sanitized":268},{"entryPoint":706,"graph":707,"unsanitizedCount":34,"severity":694},"__construct (FreeSSLAuto\\src\\Acme\\AcmeV2.php:86)",{"nodes":708,"edges":716},[709,713],{"id":676,"type":677,"label":710,"file":711,"line":712},"$_POST","FreeSSLAuto\\src\\Acme\\AcmeV2.php",121,{"id":681,"type":686,"label":714,"file":711,"line":304,"wp_function":715},"wp_redirect() [Open Redirect]","wp_redirect",[717],{"from":676,"to":681,"sanitized":268},{"entryPoint":719,"graph":720,"unsanitizedCount":34,"severity":694},"\u003CAcmeV2> (FreeSSLAuto\\src\\Acme\\AcmeV2.php:0)",{"nodes":721,"edges":724},[722,723],{"id":676,"type":677,"label":710,"file":711,"line":712},{"id":681,"type":686,"label":714,"file":711,"line":304,"wp_function":715},[725],{"from":676,"to":681,"sanitized":268},{"entryPoint":727,"graph":728,"unsanitizedCount":34,"severity":694},"force_ssl_wp (FreeSSLAuto\\src\\Admin\\ForceSSL.php:160)",{"nodes":729,"edges":734},[730,732],{"id":676,"type":677,"label":731,"file":220,"line":658},"$_SERVER",{"id":681,"type":686,"label":714,"file":220,"line":733,"wp_function":715},163,[735],{"from":676,"to":681,"sanitized":268},{"entryPoint":737,"graph":738,"unsanitizedCount":34,"severity":694},"generate_ssl_step_2 (FreeSSLAuto\\src\\Admin\\GenerateSSLmanually.php:962)",{"nodes":739,"edges":745},[740,742],{"id":676,"type":677,"label":731,"file":249,"line":741},1028,{"id":681,"type":686,"label":743,"file":249,"line":410,"wp_function":744},"echo() [XSS]","echo",[746],{"from":676,"to":681,"sanitized":268},{"entryPoint":748,"graph":749,"unsanitizedCount":34,"severity":694},"download_http01_challenge_file_handler (FreeSSLAuto\\src\\Admin\\GenerateSSLmanually.php:1176)",{"nodes":750,"edges":763},[751,753,757,759,761],{"id":676,"type":677,"label":678,"file":249,"line":752},1186,{"id":681,"type":686,"label":754,"file":249,"line":755,"wp_function":756},"file_put_contents() [File Write]",1196,"file_put_contents",{"id":685,"type":677,"label":678,"file":249,"line":758},1199,{"id":760,"type":682,"label":683,"file":249,"line":758},"n3",{"id":762,"type":686,"label":687,"file":688,"line":689,"wp_function":690},"n4",[764,766,767],{"from":676,"to":681,"sanitized":765},true,{"from":685,"to":760,"sanitized":268},{"from":760,"to":762,"sanitized":268},{"entryPoint":769,"graph":770,"unsanitizedCount":34,"severity":694},"\u003CGenerateSSLmanually> (FreeSSLAuto\\src\\Admin\\GenerateSSLmanually.php:0)",{"nodes":771,"edges":781},[772,773,774,775,776,777,779],{"id":676,"type":677,"label":731,"file":249,"line":741},{"id":681,"type":686,"label":743,"file":249,"line":410,"wp_function":744},{"id":685,"type":677,"label":678,"file":249,"line":752},{"id":760,"type":686,"label":754,"file":249,"line":755,"wp_function":756},{"id":762,"type":677,"label":678,"file":249,"line":758},{"id":778,"type":682,"label":683,"file":249,"line":758},"n5",{"id":780,"type":686,"label":687,"file":688,"line":689,"wp_function":690},"n6",[782,783,784,785],{"from":676,"to":681,"sanitized":765},{"from":685,"to":760,"sanitized":765},{"from":762,"to":778,"sanitized":268},{"from":778,"to":780,"sanitized":268},{"entryPoint":787,"graph":788,"unsanitizedCount":796,"severity":694},"plan_comparison_table (FreeSSLAuto\\src\\Admin\\HomeOptions.php:234)",{"nodes":789,"edges":794},[790,793],{"id":676,"type":677,"label":791,"file":259,"line":792},"$_SERVER (x4)",241,{"id":681,"type":686,"label":743,"file":259,"line":467,"wp_function":744},[795],{"from":676,"to":681,"sanitized":268},4,{"entryPoint":798,"graph":799,"unsanitizedCount":34,"severity":810},"data_entry (FreeSSLAuto\\src\\Admin\\AutoDataEntry.php:60)",{"nodes":800,"edges":808},[801,804],{"id":676,"type":677,"label":731,"file":802,"line":803},"FreeSSLAuto\\src\\Admin\\AutoDataEntry.php",144,{"id":681,"type":686,"label":805,"file":802,"line":806,"wp_function":807},"update_option() [Settings Manipulation]",154,"update_option",[809],{"from":676,"to":681,"sanitized":268},"low",{"entryPoint":812,"graph":813,"unsanitizedCount":34,"severity":810},"\u003CAutoDataEntry> (FreeSSLAuto\\src\\Admin\\AutoDataEntry.php:0)",{"nodes":814,"edges":817},[815,816],{"id":676,"type":677,"label":731,"file":802,"line":803},{"id":681,"type":686,"label":805,"file":802,"line":806,"wp_function":807},[818],{"from":676,"to":681,"sanitized":268},{"entryPoint":820,"graph":821,"unsanitizedCount":34,"severity":810},"aifs_force_ssl_controller (FreeSSLAuto\\src\\Admin\\ForceSSL.php:347)",{"nodes":822,"edges":829},[823,825,827],{"id":676,"type":677,"label":824,"file":220,"line":353},"$_POST['aifs_force_ssl']",{"id":681,"type":682,"label":826,"file":220,"line":353},"→ aifs_force_ssl_implement()",{"id":685,"type":686,"label":805,"file":220,"line":828,"wp_function":807},406,[830,831],{"from":676,"to":681,"sanitized":268},{"from":681,"to":685,"sanitized":268},{"entryPoint":833,"graph":834,"unsanitizedCount":34,"severity":810},"\u003CForceSSL> (FreeSSLAuto\\src\\Admin\\ForceSSL.php:0)",{"nodes":835,"edges":841},[836,837,838,839,840],{"id":676,"type":677,"label":731,"file":220,"line":658},{"id":681,"type":686,"label":714,"file":220,"line":733,"wp_function":715},{"id":685,"type":677,"label":824,"file":220,"line":353},{"id":760,"type":682,"label":826,"file":220,"line":353},{"id":762,"type":686,"label":805,"file":220,"line":828,"wp_function":807},[842,843,844],{"from":676,"to":681,"sanitized":765},{"from":685,"to":760,"sanitized":268},{"from":760,"to":762,"sanitized":268},{"entryPoint":846,"graph":847,"unsanitizedCount":28,"severity":810},"aifs_update_option (FreeSSLAuto\\src\\Admin\\HomeOptions.php:205)",{"nodes":848,"edges":854},[849,852],{"id":676,"type":677,"label":850,"file":259,"line":851},"$_POST (x2)",214,{"id":681,"type":686,"label":805,"file":259,"line":853,"wp_function":807},216,[855],{"from":676,"to":681,"sanitized":765},{"entryPoint":857,"graph":858,"unsanitizedCount":28,"severity":810},"plan_comparison_table_handler (FreeSSLAuto\\src\\Admin\\HomeOptions.php:782)",{"nodes":859,"edges":865},[860,863],{"id":676,"type":677,"label":861,"file":259,"line":862},"$_GET (x2)",784,{"id":681,"type":686,"label":714,"file":259,"line":864,"wp_function":715},804,[866],{"from":676,"to":681,"sanitized":765},{"entryPoint":868,"graph":869,"unsanitizedCount":28,"severity":810},"\u003CHomeOptions> (FreeSSLAuto\\src\\Admin\\HomeOptions.php:0)",{"nodes":870,"edges":877},[871,872,873,874,875,876],{"id":676,"type":677,"label":850,"file":259,"line":851},{"id":681,"type":686,"label":805,"file":259,"line":853,"wp_function":807},{"id":685,"type":677,"label":791,"file":259,"line":792},{"id":760,"type":686,"label":743,"file":259,"line":467,"wp_function":744},{"id":762,"type":677,"label":861,"file":259,"line":862},{"id":778,"type":686,"label":714,"file":259,"line":864,"wp_function":715},[878,879,880],{"from":676,"to":681,"sanitized":765},{"from":685,"to":760,"sanitized":765},{"from":762,"to":778,"sanitized":765},{"entryPoint":882,"graph":883,"unsanitizedCount":28,"severity":810},"log_admin_page (FreeSSLAuto\\src\\Admin\\Log.php:88)",{"nodes":884,"edges":893},[885,887,891,892],{"id":676,"type":677,"label":678,"file":263,"line":886},152,{"id":681,"type":686,"label":888,"file":263,"line":889,"wp_function":890},"file_get_contents() [SSRF\u002FLFI]",160,"file_get_contents",{"id":685,"type":677,"label":678,"file":263,"line":886},{"id":760,"type":686,"label":743,"file":263,"line":658,"wp_function":744},[894,895],{"from":676,"to":681,"sanitized":765},{"from":685,"to":760,"sanitized":765},{"entryPoint":897,"graph":898,"unsanitizedCount":28,"severity":810},"\u003CLog> (FreeSSLAuto\\src\\Admin\\Log.php:0)",{"nodes":899,"edges":904},[900,901,902,903],{"id":676,"type":677,"label":678,"file":263,"line":886},{"id":681,"type":686,"label":888,"file":263,"line":889,"wp_function":890},{"id":685,"type":677,"label":678,"file":263,"line":886},{"id":760,"type":686,"label":743,"file":263,"line":658,"wp_function":744},[905,906],{"from":676,"to":681,"sanitized":765},{"from":685,"to":760,"sanitized":765},{"summary":908,"deductions":909},"The auto-install-free-ssl plugin version 4.6.1 exhibits a mixed security posture.  While it demonstrates good practices in areas like SQL query handling and a lack of recorded critical vulnerabilities, significant concerns arise from its attack surface and output escaping. The presence of an unprotected AJAX handler presents a clear entry point for potential unauthorized actions or information disclosure if not properly secured by the application logic.  Furthermore, the extremely low percentage of properly escaped output is a major red flag, indicating a high risk of Cross-Site Scripting (XSS) vulnerabilities that could be exploited by attackers to inject malicious code into user interfaces. The taint analysis showing a high number of flows with unsanitized paths, although not reaching critical or high severity, further reinforces the concern around input sanitization.  The plugin's history of zero CVEs is positive, suggesting a generally stable codebase, but this must be weighed against the immediate risks identified in the static analysis.",[910,912,915,918],{"reason":911,"points":171},"Unprotected AJAX handler found",{"reason":913,"points":914},"Low percentage of properly escaped output",8,{"reason":916,"points":917},"High number of unsanitized paths in taint analysis",5,{"reason":919,"points":920},"Bundled library (Freemius) potentially outdated",3,"2026-03-16T17:52:30.088Z",{"wat":923,"direct":936},{"assetPaths":924,"generatorPatterns":929,"scriptPaths":930,"versionParams":931},[925,926,927,928],"\u002Fwp-content\u002Fplugins\u002Fauto-install-free-ssl\u002Fcss\u002Faifs-admin-notice.css","\u002Fwp-content\u002Fplugins\u002Fauto-install-free-ssl\u002Fcss\u002Faifs-style.css","\u002Fwp-content\u002Fplugins\u002Fauto-install-free-ssl\u002Fjs\u002Faifs-admin-script.js","\u002Fwp-content\u002Fplugins\u002Fauto-install-free-ssl\u002Fjs\u002Faifs-frontend-script.js",[],[927,928],[932,933,934,935],"auto-install-free-ssl\u002Fcss\u002Faifs-admin-notice.css?ver=","auto-install-free-ssl\u002Fcss\u002Faifs-style.css?ver=","auto-install-free-ssl\u002Fjs\u002Faifs-admin-script.js?ver=","auto-install-free-ssl\u002Fjs\u002Faifs-frontend-script.js?ver=",{"cssClasses":937,"htmlComments":940,"htmlAttributes":945,"restEndpoints":947,"jsGlobals":949,"shortcodeOutput":952},[938,939,4],"aifs-admin-notice","aifs-style",[941,942,943,944],"\u003C!-- START Freemius-->","\u003C!-- END Freemius-->","\u003C!--START Freemius-->","\u003C!--END Freemius-->",[946],"data-aifs-plugin-version",[948],"\u002Fwp-json\u002Fauto-install-free-ssl\u002F",[950,951],"aifs_admin_params","aifs_frontend_params",[]]