One Click SSL

Enable SSL/TLS (https://) to redirect all pages to SSL/TLS and load all resources over SSL/TLS.

v1.7.8Tribulant SoftwareUpdated 2026-06-19Added Mar 24, 201710k+ installs98% rating
40
Score
136
Errors
62
Warnings
+0
Change

Category Scores

Security0
Repo91
Performance100
Maintainability81

Top Issues by Category

security159
maintainability22
i18n15
repo_compliance2

Issues Details

198 issues found in latest scan

ERROR77
WordPress.Security.EscapeOutput.UnsafePrintingFunction

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

ERROR37
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$certinfo['domain']'.

WARNING16
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar

WARNING11
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_GET['page']

ERROR10
WordPress.WP.I18n.MissingTranslatorsComment

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNING9
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$basic_auth_required".

WARNING8
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_SERVER['REMOTE_ADDR']. Check that the array index exists before using it.

ERROR5
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNING4
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "do_meta_boxes".

WARNING4
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

WARNING4
WordPress.Security.SafeRedirect.wp_redirect_wp_redirect

wp_redirect() found. Using wp_safe_redirect(), along with the "allowed_redirect_hosts" filter if needed, can help avoid any chances of malicious redirects within code. It is also important to remember to call exit() after a redirect so that no other unwanted code is executed.

ERROR3
WordPress.WP.I18n.TextDomainMismatch

Mismatched text domain. Expected 'one-click-ssl' but got 'slideshow-gallery'.

WARNING2
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

WARNING1
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedConstantFound

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "DS".

WARNING1
WordPress.PHP.DevelopmentFunctions.error_log_error_log

error_log() found. Debug code should not normally be used in production.

WARNING1
WordPress.PHP.DevelopmentFunctions.error_log_print_r

print_r() found. Debug code should not normally be used in production.

ERROR1
WordPress.WP.I18n.NonSingularStringLiteralText

The $text parameter must be a single text string literal. Found: 'By turning on SSL, your server/hosting must support SSL (https://) or this could make your website inaccessible.' . "\r\n\r\n" . 'Upon clicking OK, you will be asked to log in to your WordPress dashboard again if the protocol changes.' . "\r\n\r\n" . 'If you are uncertain, click Cancel below.'

ERROR1
WordPress.WP.I18n.UnorderedPlaceholdersText

Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s, %3$s, %4$s", but got "%s, %s, %s, %s" in 'You have been using %s for some time. Please consider to %s on %s. We appreciate it very much! %s'.

ERROR1
plugin_header_no_license

Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

WARNING1
readme_parser_warnings_too_many_tags

One or more tags were ignored. Please limit your plugin to 5 tags.

ERROR1
wp_function_not_compatible_with_requires_wp

Function "wp_doing_ajax()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.6.0.

Latest Snapshot

Findings

198

Errors

136

Warnings

62

Score History

First score snapshot

First scan completed Jun 20, 2026

v1.7.8 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v1.7.8

40

Latest

Findings
198
Errors
136
Warnings
62
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins