Best insecure plugins for WordPress

The most popular insecure plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. SSL Fixer leads with 100+ active installs, ahead of Verve SSL (10+). All 2 plugins tagged “insecure” are below, with figures from WordPress.org that update every day.

Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.

Research this niche or see all plugins.

Top 2 insecure plugins

1.
SSL Fixer
The most installed insecure plugin, with 100+ active installs. No reviews yet, last updated 5 years ago. Tested only up to WordPress 5.7.21.
2.
Verve SSL
10+ active installs. Only 3 reviews so far, last updated 7 years ago. Tested only up to WordPress 5.2.30.

All 2 plugins tagged “insecure”

SSL Fixer
Up in the last 7 days:41#14,506
by Frank5 years ago
SSL Fixer makes a few changes to the database in order to fix any insecure links. Effectively fixing the HTTPS redirection and mixed content problems …
Installs
100+
Rating
–
Downloads
0/day
Verve SSL
Down in the last 7 days:2,902#47,973
by kevdog987 years ago
Verve SSL is a WordPress plugin that sets the WordPress login and Administration area to use HTTPS(SSL).
Installs
10+
Rating
4.0(3)
Downloads
0/day