Mixed content: what it is and how to fix it
What it is
A secure page loads an insecure file.
Why it matters to a client
Browsers block these files or warn the visitor, which can break layout and shake trust at exactly the wrong moment.
How to find it
Open the page in Chrome, press F12 and look at the Console tab for blocked-content warnings, or check the Security category in an AuditOpti scan.
How to fix it
Change every http:// reference in the page source to https://. A search-and-replace across the theme and database usually covers it.
- 1Run a search-and-replace across the database for `http://yourdomain` → `https://yourdomain` using a plugin such as Better Search Replace.
- 2Check the theme's files for hard-coded http:// references to fonts, scripts or images.
- 3Clear the cache and re-check the page's Console tab for warnings.
How AuditOpti prioritizes it
AuditOpti scores this as high severity by default, then multiplies it by how many pages are affected — one page is not the same problem as a hundred. After that, the AI re-ranks it against everything else on the site by likely business impact, so a high-severity problem on a service page can outrank a critical one on a page nobody visits.
Check a site for this
Run a free audit and we'll tell you whether this issue is present — along with everything else worth fixing.