WP Deployment Checklist

Required list of plugins

• WP Rest Cache By Acato (If REST APIs are used in site)

  • Setup this plugin to cache CF7 schemas

• Autoptimise By Frank Goossens (futtta)

• WP Super Cache By Automattic

• Activity Log By Activity Log Team (if Multiple user are going to access backend)

• Flamingo or Advanced CF7 DB (if CF7 is used)

• Captcha 4WP By Melapress - ❌

• FC Rate limiting for CF7 By Flyingcursor (if CF7 is used)

• Inactive Logout

• Redirection By John Godle

• Solid Security Basic By SolidWP

  • hide WP Backend Login page

• WP Mail Log By WPVibes OR WP Mail Logging By WP Mail Logging Team

• WP Migrate Lite By WP Engine

• Yoast SEO / Rankmath SEO

Security Checks

• Remove Rsd link

• Remove Shortlink

• Admin Email Change

• remove showing wordpress version

• ShapeSpace Enum check

• add access control headers for rest api

• Removed X rediect by header

• Auto Complete off for Wordpress Login page

• Restrict Special characters in comments

• If acf is active than remove script tag from wysiwyg editor and tiny_mce aditor

• if CF7 is active than phone,text and textarea validation and if WPCF7_RECAPTCHA enabaled than remove cf7 catch

• Update all Plugins and Wordpress
• Update theme (if applicable and after taking complete backup of current)
• Search Engine Visibility option in Settings > Reading
• Remove default Posts
• Keep unwanted pages in draft
• Remove unwanted media files
• Remove unwanted Forms