Plugin - Flex SSL
Force HTTPS, rewrite mixed content, and add security headers — including Cloudflare and reverse-proxy support.
- SSL
- HTTPS
- Cloudflare
What it does
Redirect HTTP to HTTPS, update site URLs, and fix mixed content on your own domain.
Reads X-Forwarded-Proto from Cloudflare so Flexible SSL does not loop.
Features
- Force HTTPS with 301 or 302 redirects
- Cloudflare / reverse-proxy header detection
- Optional HSTS and related security headers
- Mixed-content fixer for this site’s HTTP URLs
- SSL status and certificate expiry in admin
Get it
Flex SSL is free on WordPress.org under GPLv2 or later. Install from Plugins → Add New, or download the package from https://wordpress.org/plugins/flex-ssl/.