A PCI Compliance scan has warned that forms are using cleartext authentication. The site has SSL installed.

I believe that the forms are from WooCommerce. We’re not using any plugins that should be modifying login info. We do have Gravity Forms.

How do I go about getting that locked down so sensitive info isn’t in cleartext?