WordPress powers a huge proportion of the world’s websites, including ours. It is flexible, powerful and easy to update — but like a car, it needs regular servicing. Sites that are left untouched for months tend to become slow, buggy and vulnerable to hackers.
Here is the monthly maintenance checklist we recommend for small business owners. If you would rather not do it yourself, this is exactly what a website care plan covers.
Before you do anything: back up
Always take a full backup — files and database — before making changes. Store backups off-site (not just on the same server), and keep several versions in case a problem is not spotted immediately. Many hosts offer automatic daily backups; check yours is working and that you know how to restore it.
Monthly checklist
1. Update WordPress core
WordPress releases regular updates with security fixes and improvements. Minor security updates often install automatically, but check that you are on the latest version.
2. Update plugins and themes
Outdated plugins are one of the most common ways WordPress sites get hacked. Update them regularly — ideally after checking each one’s changelog and testing on a staging site for important updates.
3. Remove what you do not use
Deactivated plugins and unused themes are still potential security risks. Delete anything you are not using. Keep one default WordPress theme as a fallback.
4. Check your site works
After updates, click through your key pages:
- Homepage and main service pages.
- Contact forms — send a test enquiry and confirm it arrives.
- Booking systems or checkout, if you have them.
- Mobile view.
5. Review security
- Make sure all user accounts are still needed and have the right roles.
- Use strong, unique passwords and two-factor authentication for admin accounts.
- Check your security plugin or host’s security reports for warnings.
- Confirm your SSL certificate is valid and renewing automatically.
6. Check speed
Run your homepage through PageSpeed Insights. If scores have dropped, investigate new plugins, large images or hosting issues. See our guide to Core Web Vitals.
7. Fix broken links
Broken links frustrate visitors and look careless. Use a link-checking tool or Google Search Console to find and fix them.
8. Review Google Search Console
Look for:
- Indexing problems.
- Mobile usability or Core Web Vitals warnings.
- Security issues or manual actions.
- Which searches are bringing people to your site.
9. Clean the database
Over time, WordPress collects post revisions, spam comments and temporary data. A periodic clean-up keeps things tidy. Always back up first.
10. Update your content
- Are your prices, opening hours and contact details correct?
- Are there out-of-date offers or events still showing?
- Is your copyright year current?
- Could any popular blog posts be refreshed?
Quarterly tasks
- Test restoring a backup, so you know it works.
- Review plugins: are there better, lighter alternatives?
- Check legal pages are up to date — privacy policy, cookie policy and, in Spain, your aviso legal (see website legal essentials in Spain).
- Review analytics and conversion rates.
Signs your site needs urgent attention
- Unexpected redirects to strange websites.
- New admin users you did not create.
- Warnings from Google or your browser.
- A sudden drop in traffic.
- Your host suspending your account.
If you see any of these, get professional help quickly.
DIY or care plan?
If you enjoy tinkering and have an hour a month, you can manage this yourself. If you would rather focus on your business, a care plan gives you peace of mind and someone to call when things go wrong.
Our technical team looks after WordPress websites for businesses in Spain, the UK and Ireland, and we can also fix sites that already have problems. Get in touch to find out more.
