One Click SSL
One Click SSL has one disclosed vulnerability in the WordSec catalog, all reported in 2019; it is fixed as of September 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for One Click SSL has a vendor fix available, so running the current release closes it.
All of these findings were reported by Unknown. One Click SSL is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2019-15828One Click SSL <= 1.4.6 - Cross-Site Request Forgery
Read the full analysisVulnerability Records
One Click SSL
Author
Tribulant Software
A simple and easy to use WordPress SSL plugin which will redirect all non-SSL pages to SSL/TLS and ensure that all resources on your SSL pages are loaded over SSL as well. It includes a user-friendly setup wizard upon activation to check if SSL is supported on the hosting/server before it allows the SSL to be enabled and that ensures that the website doesn’t become inaccessible if SSL is not supported. Plugin Features Check if SSL/TLS is supported on hosting/server Enable SSL with a single click Redirects all non-SSL URLs to https:// Converts all non-SSL resources (images, scripts, stylesheets, etc.) to https:// on pages Redirect to non-SSL if SSL is not enabled Multisite network compatibility (enable SSL for all sites from one location) See our online documentation for more details and detailed instructions.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C