Somebody set up your website, and the Plugins screen now lists twenty-odd names you never chose. Some have their own menu in the dashboard, some want updating every week, and one keeps showing a banner about upgrading. You would like to know what all of it is, which parts you should be looking after, and which you can leave alone.
This guide to WordPress plugins is written for that owner. It explains what a plugin is, how to think about the ones you have, and the life every plugin goes through on your site, from the day it is chosen to the day it is removed. It is one section of our WordPress management guide, and each stage below has its own post in this section.
What are WordPress plugins?
WordPress on its own handles pages, posts, media, users and menus. A plugin is a package of extra code that adds something else: a contact form, SEO settings, backups, a shop, a booking calendar. It lives in its own folder inside wp-content/plugins on your hosting, and while it is active, WordPress loads it every time it builds a page.
An active plugin is not a separate app sitting beside your website. It runs inside it, with broadly the same access to your content and database that WordPress itself has. So the same thing that makes plugins useful is the reason to be choosy about them.
Themes are different. A theme controls how the site looks; a plugin adds what the site does. A fair rule of thumb: if you would want a feature to survive a change of theme, it belongs in a plugin.
Where plugins show up in the dashboard
Everything starts at Plugins → Installed Plugins. Each row shows the plugin’s name, a short description, its version and its author. The links under the name let you deactivate it, open its settings where it offers a settings link and, for plugins from the WordPress.org directory, open View details, which shows the description, changelog and reviews without leaving your site.
The filters above the list help more than people expect:
- Active and Inactive separate what is running from what is merely sitting on the server.
- Update Available shows which plugins have a newer version waiting.
- Must-Use appears only if your host or developer has added must-use plugins. These run automatically and cannot be switched off from this screen, which is deliberate.
- Recently Active lists plugins that were deactivated recently, which is handy when you are retracing someone else’s steps.
Many plugins also add their own item to the left-hand menu, or tuck their settings under Settings or Tools.
How to think about plugins as an owner
I find it easiest to treat each plugin as a small, ongoing commitment rather than a one-off purchase. Installing one takes a minute. Owning it means someone has to update it, notice if its developer stops maintaining it, and remove it cleanly when it is no longer needed. For a well-made plugin that is very little work. For a badly made one it can be a lot.
When you look down your own list, ask three things of each entry:
- Does it do a job the site needs today? Not a job it needed once, during the build.
- Is it still looked after? Regular updates and answered support questions are the signs.
- Is it the only plugin doing that job? Two plugins doing the same work, such as two SEO plugins or two caching plugins, is a common cause of odd behaviour.
The raw number of plugins matters less than people think. A site with many small, well-kept plugins can be healthier than one with a handful of heavy, neglected ones. If speed is your real worry, the speed section answers whether too many plugins slow a site down in detail.
The life of a plugin on your site
Every plugin passes through the same stages. Most of the plugin trouble small sites run into comes from skipping one of them, usually the first or the last.
1. Choosing
Before anything goes on a business site, spend a few minutes checking it: when it was last updated, whether it has been tested with your version of WordPress, what recent reviews and support threads say, and whether something you already have does the same thing. The post on how to choose a WordPress plugin walks through each check.
Where you get it from matters as much as what it is. The WordPress.org directory and the developer’s own website are the normal sources, while free copies of paid plugins from other sites are a well-known route for malware. See where to download plugins safely, which also covers the records worth keeping when you buy one.
If you are unsure whether a paid plugin is worth it, free and paid plugins compared explains the freemium model and when paying makes sense. And if you are wondering which kinds of plugin a business site should have at all, start with the plugins most business sites need, sorted by job.
2. Installing
Installing is the easy part: Plugins → Add Plugin (older versions call it “Add New Plugin” or just “Add New”), search, install, activate. Premium plugins arrive as a zip file that you upload from the same screen. Our existing post on installing a WordPress plugin covers all three methods, so they are not repeated here. One habit is worth adding: take a backup before installing anything that touches forms, payments, caching or security.
3. Updating
Updates bring security fixes, compatibility with new WordPress and PHP versions, and new features. Now and then they also bring problems. The answer is not to stop updating; it is to update with your eyes open. Reading the changelog before you update tells you whether a release is a small fix or a big change that deserves a backup and a quiet moment.
WordPress lets you turn on automatic updates for each plugin from the Installed Plugins screen. That suits small, low-risk plugins well. For a page builder, a shop plugin or anything the business leans on every day, many owners prefer to update by hand so they can check the site straight afterwards.
If an update does break something, you are not stuck with it. You can roll a plugin back to its previous version while you wait for a fix, though that should be a short pause, not a permanent state.
4. Living with it
Plugins change over the years. Developers sell them, stop maintaining them, or move features into paid versions. A premium licence can lapse without anyone noticing, which quietly stops its updates; what happens when a plugin licence expires explains what to check. A short review of the whole list once or twice a year catches most of this, and the plugin audit routine gives you a simple checklist for it.
5. Removing
When a plugin is no longer needed, switching it off is only half the job. Deactivating stops it running; deleting removes its files. Neither one always removes the settings, database tables or shortcodes it left behind. Read deactivating versus deleting before you tidy up, so you remove things in a safe order.
What plugins cannot do for you
Plugins can add almost any feature, but they cannot fix everything. They will not make a slow host fast, they will not turn a confusing page into a clear one, and a security plugin is no substitute for updates and good passwords. Before adding a plugin to solve a problem, ask whether the problem is really a missing feature. Sometimes it is the content, the hosting, or a setting WordPress already has.
WordPress itself has also grown. Columns, buttons, tables, galleries, an accordion-style Details block, a site icon setting and a basic XML sitemap are all built in now. A plugin installed years ago for one of those jobs may no longer be earning its place.
When a plugin causes trouble
Plugin trouble usually looks like one of three things: a white screen or a “critical error” message, one part of a page that stops working (a menu, a slider, a form), or the dashboard behaving strangely. Recent versions of WordPress can often catch a fatal error caused by a plugin and email the site’s admin address a link to recovery mode, where the faulty plugin is paused so you can log in and deal with it.
When two plugins clash, the usual method is to switch plugins off one at a time, ideally on a staging copy, until the problem disappears. Our page on fixing plugin conflicts explains how to do that without making things worse.
A simple routine from this guide to WordPress plugins
You do not need to become a developer to keep plugins in order. A small, regular routine covers most of it:
- Every week or two: look at Update Available, skim the changelogs, back up, update, and check the pages that matter.
- Whenever you buy a plugin: note where it came from, which account holds the licence, and when it renews.
- Before removing one: check where its shortcodes or blocks are used and export anything it stores.
- Twice a year: go through the full list and ask the three owner questions above about every plugin.
Write down what you change and when. A plain note in a shared document is enough.
Frequently asked questions
Who can install plugins on my WordPress site?
On a normal single WordPress site, only users with the Administrator role can install, activate or delete plugins. Editors, authors and other roles cannot. That is one reason to keep the number of administrator accounts small and to give staff or outside helpers the lowest role that lets them do their work.
Do I need to update plugins that are deactivated?
Yes, or delete them. A deactivated plugin does not run, but its files stay on the server, and in some cases a flaw in those files can still be reached. If you are keeping an inactive plugin for a short test, update it like the rest. If you no longer need it, deleting it is simpler.
Why does a plugin keep showing upgrade banners in my dashboard?
Many free plugins are funded by a paid version, and the banners are how they advertise it. They are not a sign that anything is wrong. Most can be dismissed, and some plugins let you turn the notices off in their settings. Only pay for an upgrade when there is a feature you actually need.
Can a plugin change things on my site without me doing anything?
An active plugin can, because it runs every time a page loads. If automatic updates are on, a new version can also arrive on its own. That is usually fine for small plugins, but it is a good reason to know which plugins have auto-updates turned on and to check the site after updates run.
If you would rather not be the one reading changelogs and running updates every few weeks, handing it over is an option: our WordPress monthly maintenance plan includes updates applied safely, backups taken, security watched and small problems fixed, from ₹1,499 per month onwards.
All guides in this section
- How to Choose a WordPress Plugin: Checks Before Installing
- Where to Download WordPress Plugins Safely
- Deactivate or Delete a WordPress Plugin? What Each Does
- How to Read a Plugin Changelog Before Updating
- Essential WordPress Plugins for Business, Sorted by Job
- Free vs Paid WordPress Plugins: When Premium Is Worth It
- Expired WordPress Plugin Licence: What Stops, What to Do
- Remove Leftover Plugin Data From WordPress Safely
- How to Find Which Plugin Does What in WordPress
- How to Roll Back a WordPress Plugin to an Older Version
- How to Replace a WordPress Plugin Without Breaking Things
- Code Snippets Plugin vs functions.php: Which to Use
- Plugin Not Tested With Your Version of WordPress?
- A WordPress Plugin Audit Routine You Can Repeat
Next in this series: How to Choose a WordPress Plugin: Checks Before Installing
