WordPress Help and Support: What To Do When Your Site Isn’t Working
Table of Contents
There’s a particular kind of frustration that comes with WordPress problems. Your website is supposed to be working for you, bringing in customers, showcasing your work, processing orders. Instead, you’re staring at an error message you don’t understand, or watching pages load at glacial speed, or discovering your site has been defaced by hackers who apparently have nothing better to do.
You’re not alone. WordPress powers over 800 million websites worldwide, and the overwhelming majority of those site owners aren’t developers. They’re business owners, professionals, creatives, people who need their website to work but didn’t sign up to become technical experts. When problems occur, they need help.
This guide covers the most common WordPress problems we encounter, what causes them, when you can fix them yourself, and when it’s time to call for professional support. Consider this WordPress help guide a troubleshooting companion, something to consult when things go wrong.
“My WordPress Site Is Slow”
Slowness is the most common complaint we hear, and it’s more than just annoying. Slow sites rank lower in Google searches, convert fewer visitors into customers, and create an impression of unprofessionalism before visitors even engage with your content. Research consistently shows that visitors abandon sites that take more than a few seconds to load.
Why WordPress Sites Get Slow
There’s rarely a single cause. Slow sites usually result from multiple factors combining:
Inadequate hosting is often the foundation of the problem. Cheap shared hosting puts your site on servers with hundreds of other sites, all competing for resources. When any of those sites gets traffic spikes, everyone suffers. The hosting that seemed like a bargain at £3/month becomes expensive when it costs you customers.
Theme bloat affects many sites. Premium themes from marketplaces are built to do everything, dozens of layout options, built-in sliders, multiple plugin functionalities bundled in. All that flexibility means code loading on every page, whether you use those features or not. A theme designed to serve every possible use case rarely serves any specific use case efficiently.
Plugin accumulation creeps up gradually. You install a plugin for social sharing. Another for contact forms. One for SEO. A slider plugin. A security plugin. A caching plugin to speed things up (irony noted). Before long, you have twenty plugins, some conflicting with each other, some abandoned by their developers, some loading scripts on pages where they’re not even used.
Unoptimised images are a common culprit. That photograph you uploaded directly from your camera might be 4MB, taking seconds to load on mobile connections. Multiply by ten images on a page and you’ve created an unusable experience.
Database bloat accumulates over time. WordPress stores post revisions, spam comments, transient data, orphaned metadata. On sites running for years, databases grow enormous, and queries that should be instant start taking noticeable time.
What You Can Do Yourself
Before calling for help, try these steps:
Test your actual speed. Use Google PageSpeed Insights or GTmetrix to get objective measurements. These tools identify specific issues rather than vague slowness complaints.
Install a caching plugin if you don’t have one. Caching serves saved versions of your pages rather than generating them fresh for every visitor. W3 Total Cache and WP Super Cache are free options; WP Rocket is a premium option that’s easier to configure.
Compress your images. Plugins like ShortPixel or Smush can compress existing images and automatically handle new uploads.
Audit your plugins. Go through your plugin list and honestly assess each one: do you actually use it? Is it still being updated by its developer? Could you achieve the same result with a lighter alternative? Deactivate what you don’t need, but keep them installed initially in case something breaks.
Check your hosting. If you’re on the cheapest shared hosting tier, that might simply be inadequate for your site’s needs. Good managed WordPress hosting, from providers like SiteGround, Cloudways, or WP Engine, costs more but often solves performance problems that no amount of optimisation can fix on poor hosting.
When to Call for Help
If you’ve done the basics and your site is still slow, you’re likely facing issues that require deeper investigation: server configuration, database optimisation, code-level performance problems, or fundamental architecture issues. These need professional diagnosis.
Similarly, if speed optimisation feels overwhelming or you simply don’t have time, professional help gets results faster than struggling through it yourself. We offer speed optimisation as a focused service, auditing your site, identifying the specific bottlenecks, and systematically addressing them.
Our guide to website performance covers the principles in more depth.
“My WordPress Site Was Hacked”

Discovering your site has been compromised is genuinely alarming. Maybe you’re seeing strange content you didn’t create. Maybe Google is warning visitors your site is dangerous. Maybe your host has suspended your account. Maybe customers are telling you your site redirects to pharmaceutical spam.
How WordPress Sites Get Hacked
WordPress itself is reasonably secure when kept updated. The vulnerabilities exploited by hackers almost always come from:
Outdated software. WordPress core, themes, or plugins that haven’t been updated and contain known security holes. Once a vulnerability is publicly disclosed (which happens when updates are released), hackers scan for sites that haven’t applied the fix.
Weak passwords remain embarrassingly common. “password123” and “admin” get tried by automated bots constantly. Without strong passwords on all user accounts, it’s a matter of when, not if.
Vulnerable plugins cause the majority of WordPress compromises. Some plugins are poorly coded. Some are abandoned by developers but remain installed on sites. Some are “nulled” premium plugins downloaded free from dodgy sources, often with malware built in.
Insecure hosting can leave your site vulnerable regardless of what you do. Shared hosting where one compromised site can access others, outdated server software, poor security configurations, these create vulnerabilities outside your control.
Immediate Steps If You’ve Been Hacked
Don’t panic, but act quickly. The longer malware remains, the more damage it can do, to your reputation, your search rankings, and potentially your visitors.
Take the site offline if possible. If you can access your hosting control panel, most hosts have an option to suspend the site temporarily. This prevents further damage and protects visitors.
Don’t just restore a backup immediately. This is the instinctive response, but if you don’t address how the site was compromised, hackers will simply re-exploit the same vulnerability. You’ll restore the backup only to be hacked again within days.
Document what you’re seeing. Screenshots of defaced pages, copies of warning messages, notes on when you first noticed problems. This helps whoever cleans the site understand what they’re dealing with.
Change all passwords. WordPress admin accounts, FTP accounts, database passwords, hosting account passwords. Assume all credentials are compromised.
Professional Malware Removal
Properly cleaning a hacked WordPress site requires:
- Identifying how the site was compromised
- Finding all malware (hackers typically install multiple backdoors)
- Removing malicious code without breaking the site
- Closing the vulnerability that allowed the initial compromise
- Requesting review from Google if warnings were issued
- Implementing security measures to prevent recurrence
This isn’t something most site owners should attempt themselves. Malware is often deeply hidden, in database entries, in seemingly innocent files, in places you wouldn’t think to look. Missing even one backdoor means the hackers retain access.
We provide emergency security response for compromised sites. If your site has been hacked, contact us urgently, the faster you act, the easier recovery typically is.
Preventing Future Compromises
Once your site is clean, prevention becomes priority:
Keep everything updated. WordPress core, all themes, all plugins, as soon as updates are available. Automatic updates for minor releases and plugin updates make this easier.
Use strong, unique passwords. Every account, without exception. A password manager makes this manageable.
Remove anything you don’t use. Deactivated plugins and inactive themes are still attack vectors. Delete them entirely.
Install security monitoring. Plugins like Wordfence or Sucuri Security monitor for suspicious activity and harden your site against common attacks.
Choose hosting with security focus. Good hosts provide server-level security, malware scanning, and rapid response if issues occur.
Our website security guide covers protection strategies comprehensively.
“I Can’t Update WordPress”
Updates are essential for security and functionality, but they sometimes go wrong. You click the update button and get a white screen. Or an error message. Or the site looks broken afterward. Now you’re afraid to touch anything.
Common Update Problems
The White Screen of Death often indicates a PHP error caused by incompatibility, a plugin that doesn’t work with the new WordPress version, or a theme that needs updating. The site is actually working; it’s just encountering an error before anything displays.
“Briefly unavailable for scheduled maintenance” that doesn’t go away means the update process was interrupted. WordPress creates a .maintenance file during updates and removes it when complete. If the update fails partway through, this file remains, locking everyone out.
Plugin or theme conflicts after updates are common. A plugin might work perfectly with WordPress 6.4 but have issues with 6.5. The plugin developer might not have tested with the new version yet, or might have abandoned the plugin entirely.
PHP version incompatibility increasingly causes problems. WordPress and modern plugins require recent PHP versions, but many hosts still run older versions by default. An update might push requirements beyond what your server provides.
What You Can Do Yourself
For the maintenance mode lock: If you have FTP access, connect to your site and delete the .maintenance file in your root WordPress directory. The site should reappear. If you don’t have FTP access, your hosting control panel’s file manager can do the same thing.
For white screens after plugin updates: Access your site via FTP, navigate to /wp-content/plugins/, and rename the folder of the plugin you just updated (add -disabled to the name). If the site returns, you’ve identified the problem plugin. Look for an alternative or contact the plugin developer.
For white screens after theme updates: Similar process, rename your active theme’s folder in /wp-content/themes/. WordPress will fall back to a default theme, and you can troubleshoot from there.
For PHP errors: Your host may allow PHP version changes through their control panel. WordPress currently recommends PHP 8.0 or higher. However, changing PHP versions can itself cause compatibility issues with older plugins, so proceed carefully.
When to Call for Help
If you’re not comfortable with FTP or file management, recovery becomes risky, one wrong deletion can make things worse. If you don’t have recent backups, the stakes are higher. If the site is business-critical and downtime costs money, professional help resolves issues faster than trial-and-error troubleshooting.
We routinely help clients recover from failed updates, diagnose compatibility issues, and get sites running smoothly again. Sometimes the fix takes minutes; sometimes the underlying issues require more substantial work. Either way, we can assess quickly and give you options.
“My Theme Broke”
You made some changes to your theme, or updated it, and now things look wrong. Styling is missing. Layouts are broken. Customisations you made have vanished.
Why Themes Break
Direct theme edits get overwritten. If you edited your theme’s files directly, adding custom CSS, modifying templates, and then the theme updates, those changes are gone. The update replaces the files you modified with fresh versions from the developer.
Child themes done incorrectly can cause issues. Child themes are the proper way to customise WordPress themes without losing changes on update, but they need to be set up correctly. Errors in child theme configuration can cause styling to fail entirely.
Theme-builder conflicts occur with tools like Elementor, Divi, or WPBakery. These page builders work alongside your theme, and sometimes updates to either cause conflicts. What looked perfect yesterday looks broken today.
CSS caching sometimes creates phantom problems. Your theme might actually be fine, but your browser or a caching plugin is serving old stylesheet versions. The site looks broken to you but fine to others.
What You Can Do Yourself
Clear all caches first. Your browser cache (usually Ctrl+Shift+R or Cmd+Shift+R for a hard refresh), any caching plugin you’re using, any CDN caches. Check if the problem persists after clearing.
If you lost customisations to an update, check whether your host keeps backups you can access. You might be able to restore just the theme files from before the update, extract your customisations, then re-apply them properly using a child theme.
If you’re using a child theme and it’s not working, check that the child theme is actually active (Appearance → Themes) and that the style.css header is correctly formatted with the Template: line matching your parent theme’s folder name exactly.
When to Call for Help
Theme problems can be straightforward or surprisingly complex depending on what’s happened. If your customisations were substantial and done directly in theme files, recovering them requires careful extraction and reconstruction. If theme-builder conflicts are involved, diagnosing what’s conflicting with what takes experience.
We help clients recover from theme disasters regularly. Sometimes we’re rebuilding lost work; sometimes we’re setting up proper child themes to prevent future problems; sometimes we’re recommending better approaches entirely.
“I Need to Add Features”

Your site works, but you need it to do more. A booking system. A membership area. Integration with your CRM. A product configurator. Multilingual content. The features you see on other sites that would make yours more useful.
The Plugin Question
WordPress’s plugin ecosystem is extraordinary, over 60,000 free plugins, thousands more premium. Whatever you want to do, there’s probably a plugin for it.
But “there’s a plugin for that” isn’t always the answer:
- Quality varies wildly. Some plugins are professionally developed and actively maintained. Others are abandoned projects that still appear in the directory, waiting to create security problems or conflicts.
- Plugins don’t always play nicely together. Install enough plugins and you’ll eventually encounter conflicts, features that break each other, performance that degrades, incompatibilities that create errors.
- Some needs are too specific for generic solutions. Plugins are built for broad use cases. If your requirements are particular to your business, off-the-shelf solutions may not fit.
When Plugins Are Enough
For common, well-defined functionality, quality plugins are often the right answer:
- Contact forms: Contact Form 7,WPForms, or Gravity Forms cover most needs.
- SEO:Yoast SEO or Rank Math handle technical SEO fundamentals well.
- E-commerce:WooCommerce is genuinely powerful for online selling.
- Booking and appointments: Amelia, Simply Schedule Appointments, or similar handle common booking scenarios.
- Membership and courses: LearnDash, MemberPress, or Restrict Content Pro provide membership functionality.
For these scenarios, the decision is choosing the right plugin, configuring it properly, and ensuring it integrates with your existing site without causing problems.
When Custom Development Makes Sense
Sometimes plugins genuinely can’t deliver what you need:
Specific business logic. Your booking system needs to check availability against an external calendar, apply complex pricing rules, and integrate with your particular payment processor. No plugin handles your exact combination of requirements.
Integration with existing systems. Your website needs to connect with your inventory management, pull data from your CRM, or push orders to your fulfilment system. These integrations typically require custom development.
Performance at scale. Generic plugins can become bottlenecks when your site handles significant traffic or data volumes. Custom code, built specifically for your needs, can be far more efficient.
Unique user experiences.You want something that doesn’t look and work like every other WordPress site. Product configurators, interactive tools, custom interfaces, these require development work.
Custom development costs more than installing plugins, but the result is precisely what you need rather than a compromise. For more on what custom development involves, see our WordPress development services.
The DIY vs Professional Help Decision

WordPress’s accessibility is both strength and weakness. Anyone can set up a WordPress site, but not everyone should try to solve every problem themselves.
When DIY Makes Sense
If you have time to learn, comfort with technical tasks, and a site where mistakes aren’t catastrophic, DIY can work well for:
- Regular content updates
- Basic plugin installation and configuration
- Simple customisation within your theme’s options
- Installing and configuring caching plugins
- Image optimisation
- Basic security hardening
The WordPress community provides extensive resources. The official documentation, countless tutorials, active forums, for common problems with common solutions, help is available.
When Professional Help Is Worth It
Time considerations. What takes you hours of research and trial-and-error takes an experienced developer minutes. If your time has value, and if you’re running a business, it does, the maths often favours professional help.
Risk considerations. Mistakes on a live site affect your business. Lost sales, damaged reputation, lost search rankings. Professional help reduces risk.
Complexity considerations. Some problems are simply beyond DIY solutions. Security breaches, performance issues, custom functionality, complex integrations, these require expertise.
Frustration considerations. There’s a point where wrestling with WordPress stops being productive and becomes simply unpleasant. Your mental energy has value too.
WordPress Maintenance: Preventing Problems
The best time to address WordPress problems is before they become crises. Regular maintenance keeps sites secure, fast, and functional.
What Maintenance Involves
- Updates: WordPress core, themes, and plugins should be updated regularly, ideally within days of releases, certainly within weeks. Updates include security patches; delaying them leaves vulnerabilities open.
- Backups: Regular backups stored off-site provide recovery options when things go wrong. Daily backups for active sites; weekly for less active ones.
- Security monitoring: Scanning for malware, monitoring for suspicious activity, checking file integrity. Problems caught early are easier to address.
- Performance monitoring: Tracking page speed over time, identifying when performance degrades, addressing issues before they become severe.
- Database maintenance: Cleaning out post revisions, spam, transients, and other accumulated data that slows database performance.
- Uptime monitoring: Knowing when your site goes down, preferably before customers tell you.
Doing Maintenance Yourself
If you want to handle maintenance yourself, establish a routine:
- Weekly: Check for updates, review security scan results if you’re using a security plugin.
- Monthly: Run database cleanup, check page speed, review backups to ensure they’re running.
- Quarterly: Audit installed plugins (remove unused ones), review user accounts (remove obsolete ones), check that all functionality still works properly.
The challenge is consistency. Maintenance is easy to neglect when business gets busy. Then the site runs with outdated software for months, and you only discover it when something breaks or gets hacked.
Professional Maintenance Services
For businesses that prefer not to manage WordPress infrastructure, maintenance services handle everything systematically.
ProfileTree offers maintenance packages that include regular updates, security monitoring, backups, performance optimisation, and support hours for when issues arise. The site stays healthy without requiring your attention; you focus on your actual business.
Our maintenance packages provide:
- Weekly updates with compatibility testing
- Daily backups with 30-day retention
- 24/7 security monitoring
- Monthly performance reports
- Priority support for issues
- Regular database optimisation
Packages start from modest monthly fees that typically cost less than recovering from a single preventable problem. For details on what’s included at each level, see our WordPress maintenance services.
How We Help
ProfileTree provides WordPress help across the full spectrum, from emergency fixes to ongoing maintenance to substantial development projects.
Emergency Support
Site down? Hacked? Broken after an update? We provide rapid response for urgent issues. We assess the situation quickly, provide honest estimates for resolution, and get your site functional again as priority.
Troubleshooting and Fixes
For non-emergency problems, slow performance, mysterious errors, features that don’t work, we diagnose systematically and fix properly rather than applying band-aids that fail later.
Ongoing Maintenance
For businesses that want WordPress managed professionally, our maintenance services handle updates, security, backups, and performance, plus support when you need changes or encounter issues.
Development and Enhancement
When your site needs new functionality, improved performance, or complete rebuilding, our development team delivers. Custom themes, plugin development, WooCommerce implementation, integrations with other systems, whatever your WordPress site needs to do, we can build it.
Training and Handover
If you want to manage more yourself, we provide training. Understand your site better, handle routine tasks confidently, know when to call for backup. Empowering clients to handle their own sites, when that’s what they want, is part of what we do.
Getting Help
If your WordPress site needs attention, whether that’s an emergency, troubleshooting, ongoing maintenance, or development, we’re here to help.
The first step is describing what’s happening. What problem are you experiencing? What have you tried? What’s the impact on your business? This helps us assess what’s needed and provide useful guidance quickly.
For emergencies, call us directly, don’t wait for email responses when your site is down or compromised.
For non-urgent help, get in touch through our website. We’ll respond promptly with assessment and options.
WordPress problems are frustrating, but they’re solvable. The right help, applied properly, gets your site working the way it should, so you can focus on your business rather than wrestling with technology.