Technical SEO checklist for WordPress: What to check and fix

2026-09-27 · Technical SEO · 6 min

WordPress is a good starting point for SEO, but wrong settings, thin pages and heavy plugins can hold you back. Here is a practical checklist you can work through yourself.

WordPress is the most widely used content management system on the web, and it is a solid starting point for search engine optimization. But a WordPress site is not automatically SEO-friendly. Default settings, themes and plugins can create problems that hold your site back in Google without you noticing. Many of these issues are small and easy to fix, but you have to spot them first.

This checklist covers the most important technical points for a WordPress website. You do not need to be a developer to follow it, although some items are worth going through with whoever maintains your site.

Get the basic settings right

Start with the fundamentals. Under Settings and Reading there is a checkbox labelled "Discourage search engines from indexing this site". It is often ticked while a site is being built and is surprisingly often forgotten at launch. If it is checked, WordPress adds a noindex directive and your pages gradually disappear from Google. Check it first.

Next, look at your permalinks under Settings and Permalinks. URLs containing ?p=123 say nothing about the content. Choose a structure based on the post name so that URLs are short, readable and descriptive. If you change the structure on a site that is already live, make sure the old URLs are forwarded to the new ones with 301 redirects.

• Confirm that the site is not set to discourage search engines from indexing it
• Use post-name permalinks rather than numbers and parameters
• Pick one preferred version of your domain, with or without www, and redirect the other
• Make sure the site title and tagline are filled in meaningfully

HTTPS, redirects and your domain

Your entire site should be served over HTTPS. Most hosting providers offer free SSL certificates, but having the certificate is not enough. Both the WordPress Address and the Site Address under Settings and General must start with https, and every request over http must be permanently redirected to https.

Also look for mixed content, meaning images, scripts or stylesheets still loaded over http. This often happens after a site has moved from http to https and old URLs remain in posts and settings. Browsers may then show warnings or block the content. A database search and replace, done with a tool that understands how WordPress stores data, usually fixes the problem. Always take a backup before making changes like this.

An SEO plugin and what it should do

WordPress includes some SEO features out of the box, including a basic XML sitemap at wp-sitemap.xml. For most businesses, though, it pays to use an established SEO plugin such as Yoast SEO or Rank Math. Choose one of them, not several at once, as they overlap heavily and can conflict.

Once the plugin is installed, go through the following:

• Write a unique meta title and meta description for your most important pages instead of relying on automatic templates
• Check that the XML sitemap is enabled and submit its URL in Google Search Console
• Verify that each page has the correct canonical URL so duplicates point to the original
• Fill in details about your business or organization so the plugin can output basic structured data
• Decide which content types and archives should appear in search results

That last point matters more than many people think, so let us look at it more closely.

Thin pages: attachments, archives and search

WordPress automatically creates a lot of pages you may never have considered. Every category and tag gets its own archive page, every author gets an author page, and in the past every uploaded image also got its own attachment page. Newer WordPress versions disable attachment pages by default on fresh installs, and SEO plugins can redirect them to the file itself. On older sites they may still be there.

The problem is that these pages often have little or no unique content. Large numbers of thin or duplicate pages can make it harder for Google to find what is genuinely valuable on your site. Review the following:

• Attachment pages should be disabled or redirected to the file or the post they belong to
• Tags used only once or twice create almost empty archive pages, so clean them up or set them to noindex
• Author archives are unnecessary on sites with a single writer
• Internal search result pages should not be indexed
• Category pages you want to rank should have their own introductory text

Speed: hosting, caching and images

A slow WordPress site usually comes down to a few things: weak hosting, no caching, oversized images and too many plugins. Google recommends that Largest Contentful Paint, the time it takes for the largest visible element to load, stays under 2.5 seconds. You can check this with PageSpeed Insights and in the Core Web Vitals report in Search Console.

• Choose hosting built for WordPress, running a PHP version that still receives security updates
• Use caching, either from your host or a reputable plugin, so pages are not rebuilt on every visit
• Resize images before uploading and use modern formats like WebP or AVIF, which WordPress supports
• Keep lazy loading enabled for images, but make sure the main image at the top of the page is not lazy loaded
• Consider a content delivery network if your visitors come from many locations

Plugins deserve a special mention. Each plugin can add scripts and stylesheets to every page, even where it is not used. Review your list regularly, delete anything you do not use, and be careful with heavy page builders and sliders if you do not really need them. Fewer plugins also means fewer security holes and fewer updates to keep track of.

Structured data and Search Console

Structured data helps search engines and AI services understand what your pages are about. An SEO plugin usually adds basic markup for the website, organization and articles. For a local business, it is worth adding LocalBusiness markup with name, address, phone number and opening hours, and online stores should mark up products with price and availability. Test the result with Google's Rich Results Test.

Google Search Console is essential. Connect your site, submit your sitemap and keep an eye on the page indexing report. It shows which pages are indexed, which are excluded and why. Pages accidentally marked noindex, or pages returning errors, will show up here.

Maintenance: updates, security and broken links

Technical SEO is not a one-off job. A WordPress site needs ongoing maintenance to stay fast, secure and indexed.

• Keep WordPress core, your theme and all plugins up to date, and take a backup before major updates
• Use strong passwords and two-factor authentication for administrators, since a hacked site can be filled with spam and lose visibility
• Look for broken internal links and 404 errors, and set up redirects when you delete or move pages
• Make sure staging and development copies of your site are password protected or blocked from search engines so they do not compete with the live site
• Check that robots.txt does not block folders Google needs to render your pages, such as theme and plugin files

A solid technical foundation in WordPress comes down to a handful of concrete things: correct basic settings, HTTPS, a sensibly configured SEO plugin, cleaning up thin pages, good speed and regular maintenance. Work through the items one at a time, starting with anything that could stop indexing altogether. If you want a quick overview of how your site performs technically, in Google and in AI assistants, you can run an analysis with HighRank.io and use the report as your to-do list.