Title: Insecure Content Warning Author: 10up Published: 13. August 2019 Last modified: 15. September 2026 --- Plugins suchen ![](https://ps.w.org/insecure-content-warning/assets/banner-772x250.png?rev=2588061) ![](https://ps.w.org/insecure-content-warning/assets/icon.svg?rev=2845724) # Insecure Content Warning Von [10up](https://profiles.wordpress.org/10up/) [Herunterladen](https://downloads.wordpress.org/plugin/insecure-content-warning.1.2.2.zip) [Live-Vorschau](https://de.wordpress.org/plugins/insecure-content-warning/?preview=1) * [Details](https://de.wordpress.org/plugins/insecure-content-warning/#description) * [Rezensionen](https://de.wordpress.org/plugins/insecure-content-warning/#reviews) * [Installation](https://de.wordpress.org/plugins/insecure-content-warning/#installation) * [Entwicklung](https://de.wordpress.org/plugins/insecure-content-warning/#developers) [Support](https://wordpress.org/support/plugin/insecure-content-warning/) ## Beschreibung Insecure Content Warning helps content creators with secure (HTTPS) websites avoid insecure-content warnings in the browser by flagging any elements in the content editor (such as images, videos, and embeds) that are being delivered or sourced from an insecure (HTTP) web address. All insecure elements are flagged before the content is published, and can be fixed manually or simply by clicking „fix it.“ Compatible with the „classic“ editor as well as the block editor (aka Gutenberg). ### Technical Notes * Requires PHP 7.4+. * Requires a secure / SSL (HTTPS) website, front and back end. ### Usage This plugin requires no configuration. Simply activate and the plugin will prevent posts with insecure elements from being published, as well as provide a banner with information on the offending assets. ### Optional WP-CLI Commands These are not required for normal usage of the plugin, but are available as a utility for more advanced usage. #### wp icw fix Used to fix insecure elements in existing content. Can target specific posts or bulk batches. ``` wp icw fix [] [--include] [--all] [--post_type] [--limit] [--offset] [--dry-run] ``` Example: `$ wp icw fix --all --post_type=page Checking post content... Total posts checked for insecure URL(s): 10 +-------------------------------------+ | URL(s) fixed summary | +-------------------------------------+ | 0/0 URL(s) fixed in post 98 | | 0/0 URL(s) fixed in post 96 | | 0/0 URL(s) fixed in post 76 | | ........................... | | 0/0 URL(s) fixed in post 6 | | 0/0 URL(s) fixed in post 1 | +------------------------------------- + Run `wp help icw fix` for more information on the command args. ## Screenshots [⌊Example of attempting to publish a post with insecure content - classic editor.⌉⌊ Example of attempting to publish a post with insecure content - classic editor.⌉[ Example of attempting to publish a post with insecure content – classic editor. [⌊Example of attempting to publish a post with insecure content - block editor.⌉⌊ Example of attempting to publish a post with insecure content - block editor.⌉[ Example of attempting to publish a post with insecure content – block editor. ## Installation 1. Install the plugin via the plugin installer, either by searching for it or uploading a .zip file. 2. Activate the plugin. ## FAQ ### Where do I report security bugs found in this plugin? Please report security bugs found in the source code of the Insecure Content Warning plugin through the [Patchstack Vulnerability Disclosure  Program](https://patchstack.com/database/vdp/ce5b1b34-7097-4f7b-9ab0-f96ee3dd9409). The Patchstack team will assist you with verification, CVE assignment, and notify the developers of this plugin. ## Rezensionen Zu diesem Plugin liegen noch keine Rezensionen vor. ## Mitwirkende und Entwickler „Insecure Content Warning“ ist Open-Source-Software. Folgende Menschen haben an diesem Plugin mitgewirkt: Mitwirkende * [ 10up ](https://profiles.wordpress.org/10up/) * [ psorensen ](https://profiles.wordpress.org/psorensen/) * [ Adam Silverstein ](https://profiles.wordpress.org/adamsilverstein/) * [ tlovett ](https://profiles.wordpress.org/tlovett/) * [ David Green ](https://profiles.wordpress.org/davidrgreen/) * [ Darin Kotter ](https://profiles.wordpress.org/dkotter/) * [ Jeffrey Paul ](https://profiles.wordpress.org/jeffpaul/) „Insecure Content Warning“ wurde in 1 Sprache übersetzt. Danke an [die Übersetzer](https://translate.wordpress.org/projects/wp-plugins/insecure-content-warning/contributors) für ihre Mitwirkung. [Übersetze „Insecure Content Warning“ in deine Sprache.](https://translate.wordpress.org/projects/wp-plugins/insecure-content-warning) ### Interessiert an der Entwicklung? [Durchstöbere den Code](https://plugins.trac.wordpress.org/browser/insecure-content-warning/), sieh dir das [SVN-Repository](https://plugins.svn.wordpress.org/insecure-content-warning/) an oder abonniere das [Entwicklungsprotokoll](https://plugins.trac.wordpress.org/log/insecure-content-warning/) per [RSS](https://plugins.trac.wordpress.org/log/insecure-content-warning/?limit=100&mode=stop_on_copy&format=rss). ## Änderungsprotokoll #### 1.2.2 – 2025-02-03 **Note that this release bumps the WordPress minimum version from 6.4 to 6.6.** * **Changed:** Bump WordPress minimum supported version from 6.4 to 6.6 (props [@peterwilsoncc](https://github.com/peterwilsoncc), [@jeffpaul](https://github.com/jeffpaul) via [#185](https://github.com/10up/insecure-content-warning/pull/185), [#191](https://github.com/10up/insecure-content-warning/pull/191)). * **Security:** Bump `webpack` from 5.89.0 to 5.94.0 (props [@dependabot](https://github.com/apps/dependabot), [@faisal-alvi](https://github.com/faisal-alvi) via [#186](https://github.com/10up/insecure-content-warning/pull/186)). * **Security:** Bump `@wordpress/scripts` from 27.1.0 to 30.6.0, `express` from 4.19.2 to 4.21.0 and `serve-static` from 1.15.0 to 1.16.2 (props [@dependabot](https://github.com/apps/dependabot), [@peterwilsoncc](https://github.com/peterwilsoncc) via [#191](https://github.com/10up/insecure-content-warning/pull/191), [#193](https://github.com/10up/insecure-content-warning/pull/193)). * **Security:** Bump `ws` from 7.5.10 to 8.18.0 (props [@dependabot](https://github.com/apps/dependabot), [@iamdharmesh](https://github.com/iamdharmesh) via [#193](https://github.com/10up/insecure-content-warning/pull/193)). #### 1.2.1 – 2024-08-22 **Note that this release bumps the WordPress minimum version from 5.8 to 6.4.** * **Changed:** Bump WordPress „tested up to“ version to 6.6 (props [@QAharshalkadu](https://github.com/QAharshalkadu), [@ankitguptaindia](https://github.com/ankitguptaindia), [@jeffpaul](https://github.com/jeffpaul), [@dkotter](https://github.com/dkotter) via [#152](https://github.com/10up/insecure-content-warning/pull/152), [#153](https://github.com/10up/insecure-content-warning/pull/153), [#168](https://github.com/10up/insecure-content-warning/pull/168), [#176](https://github.com/10up/insecure-content-warning/pull/176)). * **Changed:** Bump WordPress minimum supported version from 5.8 to 6.4 (props [@jeffpaul](https://github.com/jeffpaul), [@ankitguptaindia](https://github.com/ankitguptaindia), [@dkotter](https://github.com/dkotter) via [#168](https://github.com/10up/insecure-content-warning/pull/168), [#176](https://github.com/10up/insecure-content-warning/pull/176)). * **Changed:** Import of `PluginPostStatusInfo` component from `@wordpress/edit- post` to `@wordpress/editor` (props [@gabriel-glo](https://github.com/gabriel-glo), [@dkotter](https://github.com/dkotter) via [#178](https://github.com/10up/insecure-content-warning/pull/178)). * **Security:** Bump `@babel/traverse` from 7.22.10 to 7.23.2 (props [@dependabot](https://github.com/apps/dependabot), [@peterwilsoncc](https://github.com/peterwilsoncc) via [#150](https://github.com/10up/insecure-content-warning/pull/150)). * **Security:** Bump `axios` from 0.25.0 to 1.7.4 and `@wordpress/scripts` from 26.17.0 to 26.19.0 (props [@dependabot](https://github.com/apps/dependabot), [@ravinderk](https://github.com/ravinderk), [@faisal-alvi](https://github.com/faisal-alvi) via [#155](https://github.com/10up/insecure-content-warning/pull/155), [#179](https://github.com/10up/insecure-content-warning/pull/179)). * **Security:** Bump `express` from 4.18.2 to 4.19.2, `follow-redirects` from 1.15.3 to 1.15.6 and `webpack-dev-middleware` from 5.3.3 to 5.3.4 (props [@dependabot](https://github.com/apps/dependabot), [@Sidsector9](https://github.com/Sidsector9) via [#167](https://github.com/10up/insecure-content-warning/pull/167)). * **Security:** Bump `braces` from 3.0.2 to 3.0.3, `pac-resolver` from 7.0.0 to 7.0.1, `socks` from 2.7.1 to 2.8.3, `ws` from 7.5.9 to 7.5.10 and removed `ip`( props [@dependabot](https://github.com/apps/dependabot), [@iamdharmesh](https://github.com/iamdharmesh) via [#172](https://github.com/10up/insecure-content-warning/pull/172)). #### 1.2.0 – 2023-10-16 * **Note that this version bumps the minimum WordPress version from 5.7 to 5.8.** * **Added:** Ensure that saving using the keyboard shortcut `Ctrl|Command + S` triggers the insecure content check (props [@Sidsector9](https://github.com/Sidsector9), [@dinhtungdu](https://github.com/dinhtungdu), [@jeffpaul](https://github.com/jeffpaul), [@faisal-alvi](https://github.com/faisal-alvi) via [#56](https://github.com/10up/insecure-content-warning/pull/56)). * **Added:** New admin screen to bulk fix insecure content (props [@kmgalanakis](https://github.com/kmgalanakis), [@peterwilsoncc](https://github.com/peterwilsoncc) via [#112](https://github.com/10up/insecure-content-warning/pull/112)). * **Added:** Composer, with PHPCBF and PHPCS to aid with coding standards (props [@cameronterry](https://github.com/cameronterry), [@peterwilsoncc](https://github.com/peterwilsoncc) via [#127](https://github.com/10up/insecure-content-warning/pull/127)). * **Added:** Check for minimum required PHP version before loading the plugin ( props [@kmgalanakis](https://github.com/kmgalanakis), [@peterwilsoncc](https://github.com/peterwilsoncc) via [#135](https://github.com/10up/insecure-content-warning/pull/135)). * **Added:** Repo Automater GitHub Action added to automate common repo operations( props [@iamdharmesh](https://github.com/iamdharmesh), [@jeffpaul](https://github.com/jeffpaul) via [#142](https://github.com/10up/insecure-content-warning/pull/142)). * **Changed:** Bump WordPress „tested up to“ version to 6.3 (props [@kmgalanakis](https://github.com/kmgalanakis), [@jeffpaul](https://github.com/jeffpaul), [@dkotter](https://github.com/dkotter) via [#140](https://github.com/10up/insecure-content-warning/pull/140), [#144](https://github.com/10up/insecure-content-warning/pull/144)). * **Changed:** Bump WordPress minimum supported version from 5.7 to 5.8 (props [@iamdharmesh](https://github.com/iamdharmesh), [@dkotter](https://github.com/dkotter) via [#145](https://github.com/10up/insecure-content-warning/pull/145)). * **Fixed:** Properly handle fixing of multiple different instances of insecure content (props [@kmgalanakis](https://github.com/kmgalanakis), [@iamdharmesh](https://github.com/iamdharmesh) via [#139](https://github.com/10up/insecure-content-warning/pull/139)). * **Fixed:** Ensure all Cypress E2E tests pass when running on WordPress 6.3 (props [@iamdharmesh](https://github.com/iamdharmesh), [@dkotter](https://github.com/dkotter) via [#145](https://github.com/10up/insecure-content-warning/pull/145)). * **Security:** Bump `stylelint` from 9.10.1 to 15.10.1 (props [@dependabot](https://github.com/apps/dependabot), [@ravinderk](https://github.com/ravinderk) via [#126](https://github.com/10up/insecure-content-warning/pull/126)). * **Security:** Bump `cypress` from 11.2.0 to 13.2.0, `@10up/cypress-wp-utils` from 0.1.0 to 0.2.0 and `@wordpress/env` from 5.8.0 to 8.7.0 (props [@iamdharmesh](https://github.com/iamdharmesh), [@dkotter](https://github.com/dkotter) via [#145](https://github.com/10up/insecure-content-warning/pull/145)). * **Security:** Bump `postcss` from 8.4.27 to 8.4.31 (props [@dependabot](https://github.com/apps/dependabot), [@Sidsector9](https://github.com/Sidsector9) via [#147](https://github.com/10up/insecure-content-warning/pull/147)). [View historical changelog details here](https://github.com/10up/insecure-content-warning/blob/develop/CHANGELOG.md). ## Community-Plugin Dieses Plugin wird von einer Community entwickelt und betreut. [An diesem Plugin mitwirken](https://github.com/10up/insecure-content-warning) ## Meta * Version **1.2.2** * Zuletzt aktualisiert **vor 4 Wochen** * Aktive Installationen **10+** * WordPress-Version ** 6.6 oder höher ** * Getestet bis **7.1.3** * PHP-Version ** 7.4 oder höher ** * Sprachen * [English (US)](https://wordpress.org/plugins/insecure-content-warning/) und [Spanish (Mexico)](https://es-mx.wordpress.org/plugins/insecure-content-warning/). * [Übersetze in deine Sprache](https://translate.wordpress.org/projects/wp-plugins/insecure-content-warning) * Schlagwörter * [https](https://de.wordpress.org/plugins/tags/https/)[Publishers](https://de.wordpress.org/plugins/tags/publishers/) [publishing](https://de.wordpress.org/plugins/tags/publishing/)[secure content](https://de.wordpress.org/plugins/tags/secure-content/) [ssl](https://de.wordpress.org/plugins/tags/ssl/) * [Erweiterte Ansicht](https://de.wordpress.org/plugins/insecure-content-warning/advanced/) ## Bewertungen Es wurden noch keine Rezensionen eingereicht. [Deine Rezension](https://wordpress.org/support/plugin/insecure-content-warning/reviews/#new-post) [Alle Rezensionen anzeigen](https://wordpress.org/support/plugin/insecure-content-warning/reviews/) ## Mitwirkende * [ 10up ](https://profiles.wordpress.org/10up/) * [ psorensen ](https://profiles.wordpress.org/psorensen/) * [ Adam Silverstein ](https://profiles.wordpress.org/adamsilverstein/) * [ tlovett ](https://profiles.wordpress.org/tlovett/) * [ David Green ](https://profiles.wordpress.org/davidrgreen/) * [ Darin Kotter ](https://profiles.wordpress.org/dkotter/) * [ Jeffrey Paul ](https://profiles.wordpress.org/jeffpaul/) ## Support Möchtest du etwas mitteilen? Brauchst du Unterstützung? [Support-Forum anzeigen](https://wordpress.org/support/plugin/insecure-content-warning/)