Description
Really Simple SSL pro migrates sites to HTTPS and blocks common security vulnerabilities through 301 redirects via PHP or .htaccess, enforces secure cookies, and detects vulnerabilities in plugins, themes, and the WordPress core. It is designed for those who need to strengthen WordPress security by blocking code execution in the uploads folder, disabling XML-RPC and directory browsing, and protecting logins with two-factor authentication via email.
Key Features of Really Simple SSL pro
- HTTPS Migration
Applies 301 redirects via PHP or .htaccess and enables secure cookies throughout the site. - Let’s Encrypt Certificate Installation
Installs the SSL certificate when the hosting provider allows manual installation. - WordPress Hardening
Blocks code execution in the uploads folder, disables XML-RPC, and restricts public usernames. - Vulnerability Detection
Checks plugins, themes, and the WordPress core for known vulnerabilities. - Login Protection with 2FA
Sends a two-factor authentication code via email for selected user roles.
Benefits of Really Simple SSL pro
- Reduced Attack Surface
Restricts user enumeration, XML-RPC, and directory browsing in one place. - A Trustworthy Domain for Visitors
Keeps the entire site served over HTTPS without manual configuration steps. - Rapid Response to Discovered Vulnerabilities
Provides alerts about vulnerabilities before they become entry points for attackers. - A Login That Is Harder to Compromise
Requires a second authentication factor even when the password is leaked.
Who Is Really Simple SSL pro For?
- Anyone who still has pages using HTTP and needs to migrate to HTTPS without manually editing code.
- Anyone who relies on third-party plugins and themes and wants to be notified as soon as a vulnerability is identified.
- Anyone facing suspicious login attempts who wants to require two-factor authentication via email for specific roles.
How to Download Really Simple SSL pro
Really Simple SSL pro is available for download here on Ultrapack. After downloading the .zip file, install it under Plugins > Add New > Upload Plugin, select the file, and activate it. The SSL, hardening, and login settings are grouped in a single menu in the admin dashboard.
The feature set covers everything from migrating to HTTPS to blocking entry points used in automated attacks, without requiring manual editing of server files. For those who manage multiple sites and need visibility into vulnerabilities and unauthorized login attempts, the plugin brings these checks together in a single control panel.
Frequently asked questions
Is Really Simple SSL pro GPL-licensed?
Yes. Really Simple SSL pro is distributed under the GPL (GNU General Public License). You may legally use, modify and redistribute it on as many sites as you want.
Can I use Really Simple SSL pro on multiple sites?
Yes. You can install Really Simple SSL pro on as many sites as you want. Only automatic updates through Ultrapack Auto Updater have a limit: from 3 to 80 sites, depending on the plan.
How much does Really Simple SSL pro cost at Ultrapack?
Really Simple SSL pro costs US$4.99 as a single purchase, and it is also included in the subscription plans starting at US$12/mo (VIP I).
Does Really Simple SSL pro include updates?
Yes. The current version of Really Simple SSL pro is 9.8.3, published at Ultrapack on Sep 22, 2026. Subscribers update straight from the WordPress dashboard with UAU (Ultrapack Auto Updater).
Is Really Simple SSL pro scanned before publication?
Yes. Every version of Really Simple SSL pro goes through a malware scan (ClamAV and YARA rules, at UltraHub) before it is published.
What are the requirements for the plugin Really Simple SSL pro?
Requires WordPress 6.6 or higher and PHP 7.4 or higher. Tested up to WordPress 7.1.
What changed in this version
Version 9.8.3 2026-09-14
- Security: Fixed a remaining 2FA bypass in XML-RPC authentication.
- Security: Fixed an issue where unauthenticated visitors could bloat the database via the 404 interceptor. Thanks to Naoki Kawahigashi via WPScan for reporting.
- Fixed: A possible error when processing plugins that were no longer available in Other Plugins.
- Changed: Removed SimplyBook.me from onboarding and Other Plugins.
- Changed: Standardized punctuation in task and notice messages.
Version 9.8.2 2026-09-08
- Fixed: A JavaScript error on user profile pages when passkeys were disabled.
- Fixed: Users required to use 2FA could extend their own grace period.
- Fixed: A fatal error caused by an invalid author query parameter.
- Fixed: 2FA onboarding after logging in through WooCommerce.
- Fixed: Horizontal scrolling in Content Security Policy and region blocking tables.
- Fixed: The firewall could reference `advanced-headers.php` when the file did not exist.
- Fixed: Possible fatal errors caused by invalid data in public CSP and 2FA requests.
- Changed: Updated the default Content Security Policy for WordPress 7.1 compatibility.
- Changed: Improved database table checks.
Version 9.8.1 2026-09-01
- Security: Prevented unexpected deletion of the login nonce.
- Security: Prevented a bug that incorrectly changed the 2FA status from active to open.
- Security: Prevent XML-RPC logins without 2FA for users with 2FA configured.
Version 9.8.0 2026-08-18
- Fixed: Other plugin installation now retrieves the download link correctly.
- Fixed: PHP 8.5 compatibility issues.
- Fixed: The 2FA grace period was not always handled correctly.
- Changed: Improved CAPTCHA handling after failed login attempts.
- Changed: REST API checks are faster and run only when needed.
- Changed: Tested up to WordPress 7.1.
Version 9.7.0 2026-07-21
- Fixed: The firewall event log now shows the correct region and country names.
- Fixed: The dashboard now shows the correct number of hardening tasks that still need attention.
- Changed: Removed unused code.
- Changed: Removed an empty directory from the plugin ZIP file.
- Changed: Updated the color used for Metricool in the Other Plugins section.
Release notes published by the developer.
How to install
Automatic updates: this item is updated by the Ultrapack Auto Updater. With it installed, the new version shows up in your dashboard like any other WordPress update (how to set it up).
- Download the file
really-simple-ssl-pro.zip. - In the WordPress dashboard, go to Plugins > Add New > Upload Plugin.
- Select the file
really-simple-ssl-pro.zipand click Install Now. - Click Activate.
Requirements: Requires WordPress 6.6 or higher and PHP 7.4 or higher. Tested up to WordPress 7.1.
Stuck on a step? Open a ticket telling us which one you stopped at.

UAU Ready