{"id":551,"date":"2026-09-29T13:56:30","date_gmt":"2026-09-29T11:56:30","guid":{"rendered":"https:\/\/servflix.com\/check-wordpress-plugins\/"},"modified":"2026-09-29T14:48:26","modified_gmt":"2026-09-29T12:48:26","slug":"check-wordpress-plugins","status":"publish","type":"post","link":"https:\/\/servflix.com\/en\/check-wordpress-plugins\/","title":{"rendered":"Auditing plugins and add-ons: which ones do you really need?"},"content":{"rendered":"<p><strong>Every plugin is third-party code running on your website.<\/strong> It can slow down your site, clash with other plugins and, in the worst case, open the door to attackers. Still, most WordPress websites pile up dozens of plugins and Elementor add-ons over the years \u2013 many of them long unused. With this checklist, you&#8217;ll check in about 30 minutes what stays, what gets replaced and what can go.<\/p>\n<h2>Why a plugin audit pays off<\/h2>\n<ul>\n<li><strong>Security:<\/strong> According to the <a href=\"https:\/\/patchstack.com\/\" target=\"_blank\" rel=\"noopener\">Patchstack 2026 security report<\/a>, a total of 11,334 new vulnerabilities were reported in the WordPress ecosystem in 2025 \u2013 42% more than the previous year. 91% of them were in plugins, only 9% in themes. For 46%, there was no fix yet at the time of disclosure, and mass attacks started after a median of just five hours.<\/li>\n<li><strong>Speed:<\/strong> Many plugins load their scripts and stylesheets on every page \u2013 even where they aren&#8217;t needed at all.<\/li>\n<li><strong>Stability:<\/strong> The more plugins, the higher the risk of conflicts. A typical example: the <a href=\"https:\/\/servflix.com\/en\/elementor-editor-not-loading\/\">Elementor editor takes forever to load<\/a> because two plugins interfere with each other.<\/li>\n<li><strong>Effort and cost:<\/strong> Every plugin needs updating, and premium licenses cost money every year.<\/li>\n<\/ul>\n<h2>Preparation: backup, staging and plugin list<\/h2>\n<ol>\n<li><strong>Create a backup<\/strong> \u2013 files and database.<\/li>\n<li><strong>Work on a staging copy<\/strong> so your live website stays untouched during testing.<\/li>\n<li><strong>Make a plugin list:<\/strong> Under \u201cPlugins \u2192 Installed Plugins\u201d, note down all plugins with their status and version. With WP-CLI, this takes seconds: <code>wp plugin list --fields=name,status,version,update<\/code><\/li>\n<\/ol>\n<h2>The 4-question method: how to assess every plugin<\/h2>\n<p>Go through your list line by line and ask four questions about each plugin:<\/p>\n<h3>1. Do I actually use it?<\/h3>\n<p>Many plugins were installed for a one-off task \u2013 an import, a migration, a test \u2013 and then forgotten. If you can&#8217;t say in one sentence what a plugin is for, it&#8217;s a candidate for the delete list.<\/p>\n<h3>2. Can WordPress, my theme or Elementor already do this?<\/h3>\n<p>WordPress now has a lot built in: lazy loading for images, WebP support and the Site Health check. Elementor Pro includes forms, popups and a Theme Builder. And your SEO plugin usually already generates the XML sitemap and manages redirects. A separate plugin for the same task is just extra baggage.<\/p>\n<h3>3. Is it still maintained?<\/h3>\n<p>Check WordPress.org or the developer&#8217;s site for the last update. Rule of thumb: no update for more than six months or \u201cnot tested with your version of WordPress\u201d is a warning sign. If a plugin has been removed from the directory, you should replace it immediately.<\/p>\n<h3>4. What does it cost in performance?<\/h3>\n<p>Some plugins are practically weightless, others add dozens of database queries to every page. You&#8217;ll find out how to measure this below.<\/p>\n<p>In the end, each plugin gets one of three decisions: <strong>keep<\/strong>, <strong>replace<\/strong> or <strong>delete<\/strong>.<\/p>\n<h2>Which plugins do you really need? The overview<\/h2>\n<table>\n<thead>\n<tr>\n<th>Category<\/th>\n<th>Do you need it?<\/th>\n<th>Note<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>SEO<\/td>\n<td>Yes, exactly one<\/td>\n<td>Never run two SEO plugins at the same time<\/td>\n<\/tr>\n<tr>\n<td>Caching<\/td>\n<td>Yes \u2013 as a plugin or server-side<\/td>\n<td>Don&#8217;t combine two caching plugins<\/td>\n<\/tr>\n<tr>\n<td>Security \/ firewall<\/td>\n<td>Depends on your hosting<\/td>\n<td>At Servflix, the firewall already runs on the server<\/td>\n<\/tr>\n<tr>\n<td>Backup<\/td>\n<td>Depends on your hosting<\/td>\n<td>At Servflix, daily backups are included<\/td>\n<\/tr>\n<tr>\n<td>Image optimization<\/td>\n<td>Often useful<\/td>\n<td>Important if you have lots of large photos<\/td>\n<\/tr>\n<tr>\n<td>Contact form<\/td>\n<td>One is enough<\/td>\n<td>Elementor Pro has its own form widget<\/td>\n<\/tr>\n<tr>\n<td>Cookie banner<\/td>\n<td>Yes, if you use tracking<\/td>\n<td>Important for GDPR<\/td>\n<\/tr>\n<tr>\n<td>Elementor add-on packs<\/td>\n<td>As few as possible<\/td>\n<td>See next section<\/td>\n<\/tr>\n<tr>\n<td>Slider, countdown, social share<\/td>\n<td>Usually not<\/td>\n<td>Often doable with Elementor&#8217;s built-in tools<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Clean out Elementor add-ons<\/h2>\n<p>Add-on packs for Elementor often come with 50 or more extra widgets. A typical website uses two or three of them \u2013 but all of them get loaded and maintained. Here&#8217;s how to proceed:<\/p>\n<ol>\n<li>Open <strong>Elementor \u2192 Element Manager<\/strong>. There you can see how often each widget is used on your website.<\/li>\n<li>Deactivate all widgets with zero uses. They&#8217;ll no longer appear in the editor, and the editor becomes less cluttered.<\/li>\n<li>Many add-on packs also have their own toggles that let you switch off individual modules. Use them.<\/li>\n<li>If you only use a single widget from a pack, replace it with a standard Elementor widget and delete the pack.<\/li>\n<\/ol>\n<p><strong>Rule of thumb:<\/strong> at most one add-on pack on top of Elementor Pro. Whether you need Elementor Pro at all or an alternative will do, we compare in our article <a href=\"https:\/\/servflix.com\/en\/pro-elements-vs-elementor-pro\/\">ProElements vs. Elementor Pro<\/a>.<\/p>\n<h2>Measure instead of guessing: Query Monitor and PageSpeed<\/h2>\n<p>With the free <strong>Query Monitor<\/strong> plugin, you can see for every page how many database queries, HTTP requests and PHP errors each plugin causes (\u201cQueries by Component\u201d view). Plugins near the top of this list deserve a closer look. Deactivate Query Monitor again after your analysis.<\/p>\n<p>Also measure your most important pages with <strong>PageSpeed Insights<\/strong> before and after the cleanup. That way you&#8217;ll see in black and white what the audit achieved.<\/p>\n<h2>Safely remove plugins in 5 steps<\/h2>\n<ol>\n<li>Create a <strong>backup<\/strong>.<\/li>\n<li><strong>Deactivate<\/strong> the plugin, don&#8217;t delete it right away.<\/li>\n<li><strong>Test<\/strong> your website: homepage, forms, checkout and the most important subpages \u2013 ideally for one or two days.<\/li>\n<li><strong>Delete<\/strong> the plugin. Important: deactivated plugins remain on the server and, depending on the vulnerability, can still be attacked.<\/li>\n<li><strong>Check for leftovers:<\/strong> some plugins leave tables and settings behind in the database. Many offer a \u201cDelete data on uninstall\u201d option for this \u2013 enable it before deleting.<\/li>\n<\/ol>\n<h2>Your checklist to tick off<\/h2>\n<ul>\n<li>\u2610 Backup created and staging copy set up<\/li>\n<li>\u2610 Plugin list with version and status noted down<\/li>\n<li>\u2610 Every plugin assessed with the 4 questions<\/li>\n<li>\u2610 Duplicate functions (SEO, caching, forms) resolved<\/li>\n<li>\u2610 Unused Elementor widgets deactivated in the Element Manager<\/li>\n<li>\u2610 Unmaintained plugins replaced<\/li>\n<li>\u2610 Unnecessary plugins deactivated, tested and deleted<\/li>\n<li>\u2610 Load time measured before and after<\/li>\n<li>\u2610 Next audit added to the calendar<\/li>\n<\/ul>\n<h2>Frequently asked questions<\/h2>\n<h3>How many plugins are too many?<\/h3>\n<p>There&#8217;s no fixed number. 20 well-maintained, lightweight plugins are no problem, while a single badly coded one can bring a website down. What matters is the quality, maintenance and usefulness of each individual plugin \u2013 not the number.<\/p>\n<h3>Is it enough to deactivate a plugin?<\/h3>\n<p>No. Deactivated plugins remain on the server, and depending on the vulnerability, their files can still be attacked. You should delete plugins you no longer need after a testing period.<\/p>\n<h3>How often should I audit my plugins?<\/h3>\n<p>Once a quarter is a good rhythm. An audit is also worthwhile before major updates, before a relaunch and whenever your website gets noticeably slower.<\/p>\n<h3>Are premium plugins more secure than free ones?<\/h3>\n<p>Not automatically. According to the Patchstack 2026 report, premium components actually had three times more known, actively exploited vulnerabilities. On top of that, you only get updates with a valid license. An expired license is therefore a security risk.<\/p>\n<h2>Conclusion: fewer plugins, fewer worries<\/h2>\n<p>A plugin audit takes half an hour and gives you a faster, more stable and more secure website. It gets even easier when your hosting already covers the basics: at Servflix, the firewall, daily backups and caching run at server level \u2013 so you don&#8217;t need separate plugins for them. Take a look at our <a href=\"https:\/\/servflix.com\/en\/elementor-hosting\/\">Elementor hosting<\/a> or all our <a href=\"https:\/\/servflix.com\/en\/pricing\/\">plans<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Too many plugins and Elementor add-ons slow down your website and open security holes. With the 4-question method and our checklist, you&#8217;ll decide in 30 minutes what stays and what goes.<\/p>\n","protected":false},"author":1,"featured_media":508,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[34],"tags":[],"class_list":["post-551","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-performance-en"],"_links":{"self":[{"href":"https:\/\/servflix.com\/en\/wp-json\/wp\/v2\/posts\/551","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/servflix.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/servflix.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/servflix.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/servflix.com\/en\/wp-json\/wp\/v2\/comments?post=551"}],"version-history":[{"count":1,"href":"https:\/\/servflix.com\/en\/wp-json\/wp\/v2\/posts\/551\/revisions"}],"predecessor-version":[{"id":593,"href":"https:\/\/servflix.com\/en\/wp-json\/wp\/v2\/posts\/551\/revisions\/593"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/servflix.com\/en\/wp-json\/wp\/v2\/media\/508"}],"wp:attachment":[{"href":"https:\/\/servflix.com\/en\/wp-json\/wp\/v2\/media?parent=551"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/servflix.com\/en\/wp-json\/wp\/v2\/categories?post=551"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/servflix.com\/en\/wp-json\/wp\/v2\/tags?post=551"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}