Plugins and themes cause most WordPress speed and security problems — not WordPress itself.
Before installing, check
- Last updated within the last few months
- Tested up to a recent WordPress version
- Active installations in the thousands for general-purpose plugins
- Reviews mentioning support responses and recent issues
- Does it do one job? An all-in-one plugin adding features you don’t need adds weight you don’t need
How many is too many?
There’s no magic number. One badly written plugin can do more harm than twenty good ones. Measure instead: if the site slows after installing something, that’s your answer. Why is WordPress slow? How to find and fix the cause
Themes
- A lightweight theme with the block editor is usually faster than a heavy theme bundling page builders, sliders and dozens of fonts.
- Page builders are convenient but add weight to every page.
- Use a child theme if you edit theme files, or your changes vanish at the next update.
Never install
- ”Nulled” premium themes or plugins — paid products shared for free. They very often contain malware or backdoors.
- Plugins removed from the official directory for security reasons.
- Abandoned plugins with no updates in years.
Test risky changes on staging
Clone your site to a subdomain and try new plugins there first. Using a subdomain as a staging site
Everything in this guide works on Traxio’s WordPress hosting: 30 days free, then £0.99 a month.
New to Traxio? Hosting is 30 days free with no card needed, then £0.99 a month. See what’s included