Launch Your Business Website with WordPress Module 2 · Lesson 5

Plugins: Which Ones You Need and Which Ones Hurt

Module 2: Build It Right

Plugins: Which Ones You Need and Which Ones Hurt: lesson cover, Launch Your Business Website with WordPress

Quick answer

Most business sites need one plugin per job: SEO, caching, security, backups, and forms with SMTP, plus a page builder or WooCommerce if used. Avoid duplicates, one-off extras, abandoned and nulled plugins. Before installing, check recent updates, tested version, active installs and support replies, then test on staging.

Key takeaways

  • Cover each core job once: SEO, caching, security, backups, and forms with SMTP.
  • What a plugin loads and whether it is maintained matters more than the count.
  • Duplicate, one-off, abandoned and nulled plugins cause most plugin trouble.
  • Vet a plugin by last update, tested version, active installs and support replies.
  • Delete deactivated plugins and test new ones on staging first.

Plugins are the best and worst thing about WordPress. Need a booking calendar, a size chart, a WhatsApp button? There is a plugin for it, usually free, installed in a minute. That is exactly how sites end up with forty plugins, a home page that takes ages to load, and nobody sure which ones are still needed.

This lesson gives you a short list of plugins most business sites genuinely need, the kinds that cause trouble, and a quick way to vet any plugin before it goes near your site.

Which Plugins Does a Business Website Actually Need?

Fewer than you might expect. Most small business sites need one plugin for each of these jobs, and only one:

SEOControls page titles, descriptions, sitemaps and redirects. Rank Math and Yoast SEO are the two most widely used. Pick one, never both.
CachingMakes pages load faster by serving saved copies. If your host runs LiteSpeed, as many Indian hosts do, LiteSpeed Cache is the natural choice. Otherwise use the caching your host recommends.
SecurityAdds a firewall, login protection and malware scans. Wordfence is a common choice.
BackupsCopies the site somewhere other than your hosting, on a schedule. UpdraftPlus can send backups to Google Drive or other storage.
Forms and emailOne form plugin, such as Contact Form 7, Fluent Forms or WPForms, plus an SMTP plugin so form emails arrive, as covered in the previous lesson.

Add a page builder if you chose one in the themes and page builders lesson, and WooCommerce if you sell online. That is the core. Everything beyond it should have to justify itself.

These names are examples, not endorsements. Each is real, widely used and maintained as of November 2026, and each has good alternatives. What matters is that each job is covered once, by something kept up to date.

Does the Number of Plugins Matter?

Less than people think, and more than developers sometimes admit. A site with twenty small, well-written plugins can be faster than one with five heavy ones. The count is not the problem. What each plugin loads, and whether anyone maintains it, is.

That said, every plugin is extra code that needs updating and could carry a security hole. Every one you do not need is risk with no return. So the habit to build is simple: before installing something, ask whether the site can do without it.

The best plugin is often no plugin.

Which Kinds of Plugins Tend to Hurt?

Take a furniture shop in Zirakpur with a simple site: home, products by category, a contact page. Over two years, different people add things. A slider for the home page. A second slider plugin because the first could not do fades. A social share bar. A “visitors online” counter. Two SEO plugins, because a freelancer installed one and a later one preferred the other. A popup plugin used once for a Diwali sale. Each seemed harmless at the time.

The result is a slow site with overlapping features and settings that fight each other. The patterns are common enough to list:

  • Duplicates: two plugins doing the same job, especially SEO, caching or security. They conflict, and the site can behave unpredictably.
  • One-off features: plugins installed for a single campaign or effect and never removed.
  • Heavy visual extras: sliders, animation packs and widget bundles that load scripts on every page for something used on one.
  • Abandoned plugins: no updates for a long time. Security holes in them stay open for good.
  • Nulled plugins: paid plugins downloaded free from unofficial sites. These are one of the most common ways small sites get infected.

That last one deserves a plain warning. A premium plugin licence renews yearly, and it can feel tempting to skip it. A nulled copy saves that cost and often hands someone else a back door into your site. If you cannot pay for a premium plugin, use a free one from the official directory instead.

How Do You Vet a Plugin Before Installing It?

The official plugin directory at wordpress.org shows most of what you need on each plugin’s page. Spend two minutes there before you click install. Here is what a quick check looks like:

Last updated: within the last few months — Tested up to: the current WordPress version or close to it — Active installations: thousands, not dozens — Support tab: recent questions with replies — No warning that it has not been tested with recent releases, and no “closed” notice

If a plugin fails two of these, look for another. For paid plugins sold outside the directory, check the maker’s changelog for recent updates and buy only from the maker’s own site.

Then install it on your staging copy first, from the first lesson of this module, and check the pages it affects on a phone. If the site feels slower or anything looks wrong, remove it before it goes live.

How Do You Clean Up a Site That Already Has Too Many?

If your site already looks like the furniture shop’s, work through the plugin list once, slowly, on staging after taking a backup.

  1. For each plugin, write down what it does and whether that job is still needed.
  2. Delete anything deactivated. Deactivated plugins still sit on the server and can still be attacked.
  3. Where two plugins do the same job, keep the better one and move its settings over carefully, especially for SEO, where redirects and titles live.
  4. Replace abandoned plugins with maintained ones.
  5. Test the forms, the main pages and checkout if you have one, then repeat on the live site.

Keep that list. It becomes part of the monthly check in Module 5, and it makes life far easier for anyone who works on the site after you. If you would rather have someone audit and tidy the plugins, or build the site lean from the start, our WordPress development team can help, and the estimate below gives you a starting figure in a minute.

What Comes Next?

That completes Module 2. You have a clean install, a build approach, pages that ask for the enquiry, routes that deliver it, and a lean set of plugins. Module 3 is about being found. It starts with WordPress SEO basics: titles, descriptions and one H1 per page, set up properly in your SEO plugin.

Check what you learned

3 quick questions. Pick an answer and see why.

  1. How many SEO plugins should a site run?

  2. Why are nulled plugins dangerous?

  3. What should you do with a plugin you have deactivated and no longer need?

Want a lean WordPress site built for you?

Pick what you need and get a starting estimate for a fast, well-maintained WordPress site with only the plugins it should have.

What do you need in WordPress?

You finished Lesson 5

Module 3: Get Found on Google · Up next · Lesson 1 WordPress SEO Basics: Titles, Descriptions and One H1 Read the next lesson Previous: Lesson 4 · Contact Forms, WhatsApp and Calls That Reach You
Share this lesson

Written by

Kulwinder Kohli

Founder & CEO, Team CODINGCAFE

Kulwinder Kohli is the founder and CEO of Team CODINGCAFE, a software company in Mohali, India. Since 2020 Kulwinder has led the team building websites, mobile apps, CRMs and lead management systems for businesses in India, the UK, the USA and Australia. These articles are plain-English guides to choosing, pricing and running custom software.

See all 41 articles by Kulwinder

Planning a WordPress website?

We build fast, secure WordPress sites for businesses and look after them after launch. Tell us what the site must do and we will suggest the simplest build that fits.