Skip to content
PluginCanary

WP Encryption

WP Encryption: Easy SSL / HTTPS & Free SSL certificate, HTTPS redirect
by WP Encryption · 50,000+ active installs · Checked 5 Nov 2026
Healthy

Healthy: maintained, last release 4 Nov 2026, 73 releases in 24 months, no unpatched vulnerabilities.

90/ 100 Canary Score
Sub-scores for WP Encryption
Ownership100
Maintenance100
Security80
SupportNo data
Reputation75

How the score works

Quick answers

Is WP Encryption still maintained?
Yes. Last release 4 Nov 2026, 73 releases in the last 24 months. 4 Nov 2026 · wordpress.org
Who owns WP Encryption, and has it changed hands?
No change recorded. Main committer gowebsmarty since Nov 2019. 5 Nov 2026 · SVN log
Was WP Encryption removed from wordpress.org?
No. Listed on wordpress.org as of 5 Nov 2026. 5 Nov 2026 · wordpress.org
Is WP Encryption safe?
6 known vulnerabilities, all fixed (latest in 7.8.8.2). Not on the exploited list. 14 Oct 2026 · Wordfence Intelligence
Is the latest WP Encryption update safe to install?
No ownership change before 8.0.0.0. No one-star spike after it. 4 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.5 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master4 Nov 2019 to 4 Nov 2019, 1 commits
gowebsmarty4 Nov 2019 to 4 Nov 2026, 606 commits

2 committers recorded. No ownership change since 2019.

Maintenance

Last release
today
Releases, 24 months
73
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter
Releases per quarter for WP Encryption
Q1 202411
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 202527
Q4 20258
Q1 202618
Q2 20267
Q3 20269
Q4 20264

Last release 4 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (4 reviews). Lifetime: 4.9.

Average rating per quarter for WP Encryption
Q4 20255.0
Q1 20265.0
Q2 20264.6
Q3 20265.0
Q4 20265.0

Average rating stayed at 5.0 between Q4 2025 and Q4 2026.

Rating distribution
5 star1094
4 star10
3 star7
2 star5
1 star30
Latest low reviews

Security record

4 vulnerabilities in 24 months (6 on record), all patched (latest fixed in 7.8.8.2).

Show 6 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
14 Oct 2026WP Encryption - One Click SSL / HTTPS & Free SSL Certificate, HTTPS Redirect, Security < 7.8.8.2 - Missing Authorization5.3< 7.8.8.27.8.8.2Patched before disclosure
22 Jul 2026WP Encryption <= 7.8.6.6 - Authenticated (Administrator+) Arbitrary File Write via 'imploded' Parameter4.4<= 7.8.6.67.8.6.712
13 May 2026WP Encryption - One Click SSL & Force HTTPS <= 7.8.5.10 - Missing Authorization to Authenticated (Subscriber+) SSL Setup Tampering5.4<= 7.8.5.107.8.5.11Patched before disclosure
30 Apr 2026Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter6.1<= 7.7.07.7.3Patched before disclosure
9 Apr 2024WP Encryption - One Click Free SSL Certificate & SSL / HTTPS Redirect to Force HTTPS, SSL Score <= 7.0 - Sensitive Information Exposure via insufficiently protected files7.5<= 7.07.1.0466
4 Mar 2022Freemius SDK <= 2.4.2 - Missing Authorization Checks6.3< 5.7.105.7.10381

Changelog mentions of security fixes: 8.0.0.0 (security); 7.8.7.2 (security, vulnerability); 7.8.7.4 (security); 7.8.8.1 (security, vulnerability); 7.8.8.2 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 2 support threads resolved in the last 2 months.

Momentum

50,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WP Encryption
4 May 20261,248
11 May 202625,514
18 May 20265,796
25 May 202642,478
1 Jun 20265,243
8 Jun 202622,751
15 Jun 20264,153
22 Jun 20263,070
29 Jun 20262,840
6 Jul 202623,750
13 Jul 202623,577
20 Jul 202624,356
27 Jul 202642,433
3 Aug 202624,993
10 Aug 202624,572
17 Aug 202621,749
24 Aug 20264,864
31 Aug 20263,446
7 Sep 202622,019
14 Sep 20264,966
21 Sep 20263,428
28 Sep 202620,901
5 Oct 202641,951
12 Oct 20265,015
19 Oct 20264,294
26 Oct 20264,921
2 Nov 2026482

Weekly downloads over the last 4 weeks are 76% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

SSL Insecure Content FixerScore 100 · 100,000+Easy HTTPS Redirection (SSL)Score 98 · 100,000+One Click SSLScore 96 · 10,000+WP Force SSL & HTTPS SSL RedirectScore 93 · 80,000+

Facts

Version8.0.0.0
AuthorWP Encryption
Added4 Nov 2019
Last updated4 Nov 2026
Active installs50,000+
Requires WordPress5.4
Tested up to7.1.4
Requires PHP7.0
CategorySecurity & Privacy > SSL & HTTPS Management
Tagsssl, https, free ssl, https redirect, ssl certificate

Other plugins by this author: InboxAuth - Email Security, Setup SPF / DKIM, DMARC & Check Email Authenticity, AbiliZen - AI Connector for WordPress MCP & AI Abilities Manager

Questions

Is WP Encryption still maintained?

Yes. Last release 4 Nov 2026, 73 releases in the last 24 months.

Who owns WP Encryption, and has it changed hands?

No change recorded. Main committer gowebsmarty since Nov 2019.

Was WP Encryption removed from wordpress.org?

No. Listed on wordpress.org as of 5 Nov 2026.

Is WP Encryption safe?

6 known vulnerabilities, all fixed (latest in 7.8.8.2). Not on the exploited list.

Is the latest WP Encryption update safe to install?

No ownership change before 8.0.0.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 5 Nov 2026.Report a data issue