Over the decades my WordPress site has had a few different URLs, and I thought I had managed to keep them all up to date as I changed sites. Using owasp-zap (under Kali) to test my site it did manage to find five URLs remaining referring to an older site location.
Plus I wished to change all http:// references to https:// references as that is the way the world is moving and I am using a letsencrypt certificate now so https works. Apart from just being a good idea it will also stop all the alerts from owasp-zap about mixed content pages caused mainly by images which were embedded back before I used https, which will become an issue in the future as modern browsers are beginning to refuse to serve embedded http content from https pages.
There are a lot of WordPress plugins that promise to perform global changes; supprisingly two of the higher ranking ones just did not work at all for me.
Then I found the “Velvet Blues Update URLs” plugin. It only permits the changing of URLs, but that is all I need. And it just works.
Simply install the WordPress plugin “Velvet Blues Update URLs”, activate it. Under the Tools menu there is now an option to “Update URLs”.