core

Plugin

A software add-on that extends WordPress functionality without modifying core files. Plugins can add features like contact forms, SEO tools, security hardening, and e-commerce.

Plugins are one of the main reasons WordPress powers over 40% of the web. They let you add virtually any feature to your site without writing code from scratch.

How Plugins Work

A plugin is a collection of PHP files that WordPress loads automatically when activated. Plugins hook into WordPress core using the Plugin API (actions and filters) to modify behavior, add admin pages, or render front-end content.

Installing Plugins

There are two primary ways to install a plugin:

  • From the WordPress repository — Go to Plugins > Add New in your dashboard, search for the plugin, and click Install Now.
  • Manual upload — Download a plugin ZIP file and upload it via Plugins > Add New > Upload Plugin.

Choosing Quality Plugins

Not all plugins are created equal. Look for these quality signals:

  • Regular updates (within the last 3 months)
  • High active installation count
  • Compatibility with your WordPress version
  • Positive reviews and a responsive developer

Performance Considerations

Each active plugin adds PHP code that runs on every page load. Keep your plugin count reasonable and deactivate plugins you are not using. A site with 20 well-coded plugins can outperform one with 5 poorly coded plugins.

Must-Have Plugin Categories

  • Security — Wordfence, Sucuri, or iThemes Security
  • SEO — Yoast SEO or Rank Math
  • Performance — WP Rocket, LiteSpeed Cache, or W3 Total Cache
  • Backups — UpdraftPlus or BlogVault