What do you check when someone asks you to have a look at their WordPress website?

[ad_1]

* Hide the WordPress version to the public
* Hide or deactivate the debug.log file
* Use HTTP version 2 (or 3)
* Use a compression like gzip or Brotli
* Install as few plugins as possible (= decrease security risks and compatibility problems)
* Replace plugins that haven’t been developed in over a year
* Remove WordPress Default Themes if not used
* Remove WordPress Emoji Script if not used
* Remove WordPress Gutenberg Block Library if not used
* Disable Gravatar if not used
* Deactivate RSS-Feed-URL if not used
* Deactivate RSS-Comments-URL if not used
* Deactivate REST-API-URL if not used
* Check console errors and warnings
* Title should contain the keyword and encourage a click
* Title should not have more than 60 characters
* Meta description should contain the keyword and encourage a click
* Meta description should not have more than 160 characters
* Only one meta robots per page
* Only one <title> per page
* Only one meta description per page
* No meta keywords in the source code
* Check the heading hierarchy (H1, H2, H3, …)
* Images should have an ALT attribute
* Add a XML sitemap
* All HTTP protocol variants should redirect to a single variant
* Use HTML5 and check for deprecated HTML tags

[ad_2]