WordPress Maintenance Checklist

0 / 31 completeWeighted by risk severity

0%

Security

Scans, SSL, alerts, and access control

Uptime monitoring checkWebFixit: All plansVerify your site is online and responding normally.
Security alert reviewWebFixit: Perform+High riskCheck for any malware or intrusion alerts.Unreviewed alerts let breaches spread before you can respond.
Security scanWebFixit: Perform+CriticalRun full malware and vulnerability scan.Malware can sit undetected for months without regular scanning.
Comment moderationManual taskReview and approve or remove pending comments.
SSL certificate checkWebFixit: All plansCriticalVerify SSL is valid and not expiring within 30 days.Expired SSL breaks trust, blocks forms, and triggers browser warnings.
User account auditManual taskHigh riskReview admin accounts. Remove old or unused users.Stale admin accounts are a frequent entry point for attackers.
Monthly maintenance reportWebFixit: All plansGenerate summary of all tasks completed this month.
Full security auditWebFixit: Perform+CriticalComprehensive security review including penetration testing basics.Annual audits catch systemic issues daily checks miss.
Domain renewal checkManual taskHigh riskVerify domain is set to auto-renew or renew manually.Expired domains take your entire business offline instantly.

Backups

Verification, restore tests, and archives

Backup verificationWebFixit: All plansCriticalConfirm yesterday's backup completed successfully.No verified backup means permanent data loss if your site is hacked or corrupted.
Backup restore testWebFixit: All plansCriticalTest that a recent backup can be successfully restored.Backups that were never tested fail when you need them most.
Full site backup archiveWebFixit: All plansHigh riskCreate and store a full annual site archive off-server.Off-server archives protect against host-level failures.

Updates

Core, plugins, themes, and compatibility

Plugin update reviewWebFixit: All plansHigh riskCheck for available plugin updates and review changelogs before applying.Outdated plugins are a leading cause of WordPress security breaches.
Theme update checkWebFixit: All plansHigh riskReview available theme updates for compatibility before deploying.Stale themes often carry unpatched vulnerabilities.
WordPress core update checkWebFixit: All plansHigh riskVerify WordPress core is current or schedule update testing.Running outdated WordPress core exposes known exploits.
Full plugin auditWebFixit: All plansHigh riskReview all installed plugins. Remove unused ones, update active ones.Unused plugins are a common attack vector even when deactivated.
PHP version checkWebFixit: All plansHigh riskVerify PHP version is current and compatible with plugins.End-of-life PHP versions stop receiving security patches.
Plugin license renewalManual taskReview and renew premium plugin licenses before expiry.
WordPress version compatibility reviewWebFixit: All plansHigh riskEnsure theme and all plugins are compatible with latest WP version.Incompatible updates are a top cause of white-screen site failures.

Performance

Speed, Core Web Vitals, and optimization

Automate this checklist

Scale Without the Stress

Partner with WebFixit and get reliable, done-for-you support for all of your client sites, without the headaches. Let's chat and see how we plug into your workflow.

Get Started View retainers

Built for agencies that want to scale without the stress