'Not Secure' Warning - Mixed Content Error
Your site runs on HTTPS, but some images or scripts are still loading from old HTTP links, which causes the browser to show a 'Not Secure' warning.
Why this happens
This happens when your site is served over HTTPS, but some resources on the page - images, scripts, or stylesheets - are still hardcoded with old http:// links, often left over from before your site moved to SSL. Browsers flag this as a security inconsistency, even though the page itself loads.
Step-by-step fix
- Install a 'Search & Replace' plugin (such as Better Search Replace).
- Replace 'http://yoursite.com' with 'https://yoursite.com' in the database.
- Clear your cache (if a caching plugin is installed).
- Reload your site in the browser and check whether the warning is gone.
How to prevent it happening again
- Always use protocol-relative or HTTPS URLs when adding new images or embeds after moving to SSL.
- Run a search-and-replace across your database shortly after switching to HTTPS, not months later.
- Check third-party embeds (like old YouTube or social embeds) for hardcoded http:// links.
😩 Still stuck, or want it fixed without doing it yourself?
I fix WordPress errors like this every day. Send me your error and I'll get your site back up - most fixes are completed within 24 hours.