The 40-Minute HTTPS + Mixed Content Checklist for Small WordPress Sites

SSL is on. The padlock is still angry. On small WordPress sites that usually means HTTP leftovers, mixed content, or an insecure form — not a soft-404. This checklist is not a redirect-chain audit. Re