* MetaBox for custom post type
* WP Rocket for caching
* Grid builder WP for post grids with custom facets
* WPCodebox for snippets with a cloud repository
* WS Form for contact forms
* CleanTalk for spam protection
* Motion.Page for GSAP
Themes: Oxygen or Bricks
Hope this helps.
I tried to keep them to minimum but my basic set up is:
​
* Perfmatters
* SEOPress
* OOPSpam
* FluentForms
Wordfence
Custom Post Type UI
ACF Pro
Oxygen Builder
Wordfence. You wouldn’t believe how many attacks WordPress sites get.
Site Health
Gutenberg
Create Block Theme
Health Check & Troubleshooting
Enlighter – Customizable Syntax Highlighter
Yoast SEO
Wordfence (Really the only MUST install).
For forms- Gravity forms.
Redirection, ACF, CPT UI (Although ACF can do this now), Yoast SEO, Mailgun for WordPress, Oxygen, CookieYes, Formidable Forms.
Majority of the time this is all I need to create most sites (with exception if I need WooCommerce).
* ACF Pro
* Simple Basic Contact Form (very lightweight & does pretty much everything you need a regular contact form to do)
* WP Mail SMTP
Edit: Also Redis Object Cache (with Redis running on the server itself)
For most non-ecommerce sites I work on these will be the only plugins I install, unless there’s a good reason to install anything else. Most other functionality that’s required is usually implemented via the themes I develop.
We’ve tried to standardize as much as possible across all the sites our agency builds.
* ACF Pro
* CPTUI
* EWWW Image Optimizer
* ManageWP Worker
* FluentSMTP
* Updraft Plus
* Gravity Forms
* Elementor Pro
* WordFence
Advanced Custom Fields Pro
Akismet
Cookie Notice & Compliance for GDPR / CCPA
Google Site Kit
Gravity Forms
WatchTowerHQ
Wordfence
Yoast
Yoast
Wordfence/jetpack/some sort of security plugin
Gravity forms
Monsterinsights
Revolution slider
Autoptomize
Bakery or Elementor if you dont feel like creating from scratch
My absolute number 1 is;
AAM (role, access and menu management, but also has API and some security control, redirects per user or role amd per post/page, as well as specific page access)
Others are:
– Disable comments (if not a blog)
– Disable REST API (role based – usually just disable public and subscriber)
– Various other disable type plugins like the blog, widgets, emojis, embeds
– Updraftplus
– Something that watches for file changes
– Something to hide the WP details in the frontend, headers, file locations, wp-admin rename etc.
– Disable Author pages
– Lastly; If users will be on the backend frequently, I use UIPress (v2, not used v3 yet)
Dont forget the Updraft Plus
Rank maths
The first order of business when developing a site, install:
* Updraft Backup Plugin.
* Some Page Duplicator Plugin
Everything else comes distant second.
I installed Wp hide login.
Updraft Plus
Wordfence
WP Mail SMTP
SEO Framework
Edit Author Slug
Shortcodes Ultimate
Classic Editor
Wordfence. The free version is enough really. It catches pretty much everything immediately. [For example.])
* MetaBox for custom post type
* WP Rocket for caching
* Grid builder WP for post grids with custom facets
* WPCodebox for snippets with a cloud repository
* WS Form for contact forms
* CleanTalk for spam protection
* Motion.Page for GSAP
Themes: Oxygen or Bricks
Hope this helps.
I tried to keep them to minimum but my basic set up is:
​
* Perfmatters
* SEOPress
* OOPSpam
* FluentForms
Wordfence
Custom Post Type UI
ACF Pro
Oxygen Builder
Wordfence. You wouldn’t believe how many attacks WordPress sites get.
Site Health
Gutenberg
Create Block Theme
Health Check & Troubleshooting
Enlighter – Customizable Syntax Highlighter
Yoast SEO
Wordfence (Really the only MUST install).
For forms- Gravity forms.
Redirection, ACF, CPT UI (Although ACF can do this now), Yoast SEO, Mailgun for WordPress, Oxygen, CookieYes, Formidable Forms.
Majority of the time this is all I need to create most sites (with exception if I need WooCommerce).
* ACF Pro
* Simple Basic Contact Form (very lightweight & does pretty much everything you need a regular contact form to do)
* WP Mail SMTP
Edit: Also Redis Object Cache (with Redis running on the server itself)
For most non-ecommerce sites I work on these will be the only plugins I install, unless there’s a good reason to install anything else. Most other functionality that’s required is usually implemented via the themes I develop.
We’ve tried to standardize as much as possible across all the sites our agency builds.
* ACF Pro
* CPTUI
* EWWW Image Optimizer
* ManageWP Worker
* FluentSMTP
* Updraft Plus
* Gravity Forms
* Elementor Pro
* WordFence
Advanced Custom Fields Pro
Akismet
Cookie Notice & Compliance for GDPR / CCPA
Google Site Kit
Gravity Forms
WatchTowerHQ
Wordfence
Yoast
Yoast
Wordfence/jetpack/some sort of security plugin
Gravity forms
Monsterinsights
Revolution slider
Autoptomize
Bakery or Elementor if you dont feel like creating from scratch
My absolute number 1 is;
AAM (role, access and menu management, but also has API and some security control, redirects per user or role amd per post/page, as well as specific page access)
Others are:
– Disable comments (if not a blog)
– Disable REST API (role based – usually just disable public and subscriber)
– Various other disable type plugins like the blog, widgets, emojis, embeds
– Updraftplus
– Something that watches for file changes
– Something to hide the WP details in the frontend, headers, file locations, wp-admin rename etc.
– Disable Author pages
– Lastly; If users will be on the backend frequently, I use UIPress (v2, not used v3 yet)
Dont forget the Updraft Plus
Rank maths
The first order of business when developing a site, install:
* Updraft Backup Plugin.
* Some Page Duplicator Plugin
Everything else comes distant second.
I installed Wp hide login.
Updraft Plus
Wordfence
WP Mail SMTP
SEO Framework
Edit Author Slug
Shortcodes Ultimate
Classic Editor
Wordfence. The free version is enough really. It catches pretty much everything immediately. [For example.])
acss, perfmatters, metabox, wp codebox
Disablegutenberg
Duplicator?