SSL Zen — SSL Certificate Installer & HTTPS Redirects

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

99 searches this plugin appeared in over the last 90 days, 20 listed. 62 left out as unrelated or noise (years, numbers, stray words).

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 65% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 28 days ago and a band this size takes about a year or more to cross, so the real count is still just under 10K.

1. ★★★★★ tarikino

   11mo ago

   Awsome Plugin, it works smoothly and properly

   Read on wp.org ↗
2. ★★★★★ jannatcosmetics23

   1.2y ago

   Thank you very much, I am not a developer and working with WooCommerce was very difficult for me. But WooCommerce helped me solve everything in a very easy way. My site is ready to launch❤️ This topic was modified 10 months, 1 week ago by jannatcosmetics23.

   Read on wp.org ↗
3. ★★★★★ larkwest

   1.3y ago

   Easy 0eazyFreeGREAT communiction/support available (haven[t used in recent years; no need)

   Read on wp.org ↗
4. ★★★★★ irvingmariscal

   1.3y ago

   Second time using this amazing pluging and it works exactly the same, and is free, you just need to configure some things and do some research but it works just perfect.

   Read on wp.org ↗
5. ★★★★★ melvincava2025

   1.4y ago

   tuve problemas para la instalación, pero despues funciona de maravilla hasta ahora.

   Read on wp.org ↗
6. ★★★★★ rdtallman37

   1.6y ago

   I was impressed with the support I received from the SSL ZEN team. I was struggling to obtain a reasonable SSL certificate that most web services charge outrageous prices for. I took the time to explore and found SSL ZEN through the help of the WP FORCE SSL PRO plugin. Both companies provided me with the suport with my understanding of how SSL works, how to save money with SSL certificates, and how to add them to C-Panel, and activate. Thank you for such a wonderful way to save money with SSL.

   Read on wp.org ↗
7. ★★★★★ therewat

   1.7y ago

   Amazing program and easy to use.

   Read on wp.org ↗
8. ★★★★★ kartmanco

   1.7y ago

   This worked really well with Patmos hosting. Much easier then creating the certificates with the domain provider, then manually entering the keys

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 4.7.42 Dashboard: the “More from Zen Plugins” panel now recommends 404Zen — our free broken-link & 404 checker that grades your whole site — with a direct link to it on WordPress.org. 4.7.42
2. — Version 4.7.41 Added an optional email opt-in during setup (Step 1) and on the SSL-activated success screen — get a reminder before your certificate expires so your site never slips back to “Not Secure”, plus occasional SSL tips. Unche 4.7.41
3. — Version 4.7.40 Security hardening: certificate, private key, status and debug-log downloads now require administrator privileges and a valid security nonce (fixes a report where the setup-file download handler ran without an explicit c 4.7.40
4. — Version 4.7.39 Added anonymous, opt-in setup analytics so we can see where users get stuck during SSL setup and make it smoother (first-party only, no personal data, respects your tracking-consent choice) 4.7.39
5. — Version 4.7.38 Simplified the post-setup screen: one friendly, no-pressure review request shown to everyone, with a help option always available 4.7.38
6. — Version 4.7.37 Redesigned the upgrade screen: a clearer good-better-best choice (annual, a pay-once lifetime option, and a done-for-you setup) with a simple side-by-side of what changes when you go Pro 4.7.37

1 open vulnerability affects the current version (4.7.43). 7 of 8 disclosed are patched.

1. Patched Medium · 4.9 SSL Zen <= 4.7.42 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'file_name' Parameter ↗
   2026-09-24 CVE-2026-17602 Improper Limitation of a Pathname to a Restricted Directory Affects <= 4.7.42 Patched in 4.7.43
2. Patched Medium · 6.1 SSL Zen <= 4.7.42 - Reflected Cross-Site Scripting via 'uri' Parameter ↗
   2026-09-24 CVE-2026-17577 Improper Neutralization of Input During Web Page Generation Affects <= 4.7.42 Patched in 4.7.43
3. Patched Medium · 6.1 SSL Zen <= 4.7.42 - Reflected Cross-Site Scripting via 'uri' and 'host' Parameters ↗
   2026-09-18 CVE-2026-15463 Improper Neutralization of Input During Web Page Generation Affects <= 4.7.42 Patched in 4.7.43
4. Patched Medium · 4.3 SSL Zen — SSL Certificate Installer & HTTPS Redirects < 4.7.40 - Authenticated (Subscriber+) Information Exposure ↗
   2026-09-11 CVE-2026-86781 Exposure of Sensitive Information to an Unauthorized Actor Affects < 4.7.40 Patched in 4.7.40
5. Open Medium · 6.1 SSL Zen — SSL Certificate Installer & HTTPS Redirects <= 4.7.43 - Reflected Cross-Site Scripting ↗
   2026-08-17 CVE-2026-28569 Improper Neutralization of Input During Web Page Generation Affects <= 4.7.43 No patch available
6. Patched Medium · 5.3 SSL Zen – Free Let&#039;s Encrypt SSL Certificate & HTTPS/SSL Redirect WordPress Plugin <= 4.5.0 - Sensitive Information Exposure ↗
   2024-04-17 CVE-2024-1076 Improper Authentication Affects <= 4.5.0 Patched in 4.6.0
7. Patched Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
   2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation Affects <= 4.5.2 Patched in 4.5.3
8. Patched Medium · 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks ↗
   2022-03-04 CVE-2022-4974 Missing Authorization Affects <= 4.0.4 Patched in 4.0.5

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 9 languages, 0 at 90% or more

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-10-03 10K+ → 9K+ down after 1 days in tier
2. 2026-10-02 9K+ → 10K+ up after 4 days in tier
3. 2026-09-28 10K+ → 9K+ down after 1088 days in tier
4. 2023-10-06 20K+ → 10K+ down after 376 days in tier
5. 2022-09-25 30K+ → 20K+ down after 371 days in tier
6. 2021-09-19 50K+ → 30K+ down after 123 days in tier
7. 2021-05-19 40K+ → 50K+ up after 82 days in tier
8. 2021-02-26 30K+ → 40K+ up after 122 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for SSL Zen — SSL Certificate Installer & HTTPS Redirects into a readme, a review or a deck. It updates itself.

SSL Zen — SSL Certificate Installer & HTTPS Redirects: 9K+ active installs, 4.9★ (665 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/ssl-zen