Why Is SureRank WordPress SEO Plugin So Popular? via @sejournal, @martinibuster

A new SEO plugin called SureRank, by Brainstorm Force, makers of the popular Astra theme, is rapidly growing in popularity. In beta for a few months, it was announced in July and has amassed over twenty thousand installations. That’s a pretty good start for an SEO plugin that has only been out of beta for a few weeks.

One possible reason that SureRank is quickly becoming popular is that it’s created by a trusted brand, much loved for its Astra WordPress theme.

SureRank By Brainstorm Force

SureRank is the creation of the publishers of many highly popular plugins and themes installed in many millions of websites, such as Astra theme, Ultimate Addons for Elementor, Spectra Gutenberg Blocks – Website Builder for the Block Editor, and Starter Templates – AI-Powered Templates for Elementor & Gutenberg, to name a few.

Why Another SEO Plugin?

The goal of SureRank is to provide an easy-to-use SEO solution that includes only the necessary features every site needs in order to avoid feature bloat. It positions itself as an SEO assistant that guides the user with an intuitive user interface.

What Does SureRank Do?

SureRank has an onboarding process that walks a user through the initial optimizations and setup. It then performs an analysis and offers suggestions for site-level improvements.

It currently enables users to handle the basics like:

  • Edit titles and meta descriptions
  • Custom write social media titles, descriptions, and featured images,
  • Tweak home page and, archive page meta data
  • Meta robot directives, canonicals, and sitemaps
  • Schema structured data
  • Site and page level SEO analysis
  • Automatic image alt text generation
  • Google Search Console integration
  • WooCommerce integration

SureRank also provides a built-in tool for migrating settings from other popular SEO plugins like Rank Math, Yoast, and AIOSEO.

Check out the SureRank SEO plugin at the official WordPress.org repository:

SureRank – SEO Assistant with Meta Tags, Social Preview, XML Sitemap, and Schema

Featured Image by Shutterstock/Roman Samborskyi

WP Engine’s AI Toolkit Vectorizes WordPress Sites For Smart Search via @sejournal, @martinibuster

WP Engine announced the release of its AI Toolkit, a way to easily integrate advanced AI search and product recommendations into WordPress websites, plus a Managed Vector Database that enables developers to easily integrate AI features directly into websites.

Smart Search AI

WP Engine’s AI Toolkit helps WordPress site owners improve search and content visibility without requiring a steep technical learning curve. Smart Search AI is easily enabled in just a few clicks. Once activated, it syncs with WordPress content, including:

  • Posts
  • Pages
  • Tags
  • Metadata
  • Custom fields

Smart Search AI converts a website’s content into a vector format to deliver faster, more useful search results. The system combines natural-language and keyword search to help contextualize queries and guide visitors to what they need, which may help reduce bounce rates and support higher conversions.

AI-Powered Recommendations

The AI-powered recommendations feature uses past and current user session data to suggest products or content that is relevant to the user. This helps increase shopping sales and keeps readers engaged with content. The system runs efficiently without slowing down the website and uses flat-rate pricing with no overage fees. It’s suited for eCommerce, media, and any site focused on driving sales and engagement through personalized experiences.

Managed Vector Database

WP Engine’s Managed Vector Database is a service that simplifies building AI features directly into WordPress websites. Designed for developers, agencies, and site owners, it removes the need to manage tasks like data extraction, embedding creation, and content updates. Developers can start building content-based AI apps and functionalities immediately, because the system automatically processes and trains on their WordPress content without additional setup.

Integrated with WordPress, the database keeps AI outputs aligned with current site content without extra work. It enables developers to connect WordPress data directly to chatbot frameworks or APIs, and it also makes AI features accessible to non-technical creators or site owners. This enables creators to focus on building meaningful experiences without getting bogged down in technical setup.

Read more about WP Engine’s AI Toolkit:

WP Engine Launches AI Toolkit Empowering Website Owners to Drive Engagement and Growth

Featured Image by Shutterstock/Ground Picture

WordPress Malware Scanner Plugin Contains Vulnerability via @sejournal, @martinibuster

Wordfence published an advisory on the WordPress Malcure Malware Scanner plugin, which was discovered to have a vulnerability rated at a severity level of 8.1. At the time of publishing, there is no patch to fix the problem.

Screenshot Showing 8.1 Severity Rating

Malcure Malware Scanner Vulnerability

The Malcure Malware Scanner plugin, installed on over 10,000 WordPress websites, is vulnerable to “Arbitrary File Deletion due to a missing capability check on the wpmr_delete_file() function” by authenticated attackers. The fact that an attacker needs authentication as a user makes it a little less likely for it to be exploited, however not by much because it only requires subscriber level authentication, which is the lowest level of authentication. The “subscriber” role is the default level of registration on a WordPress website (if registration is allowed).

According to Wordfence:

“This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files making remote code execution possible. This is only exploitable when advanced mode is enabled on the site.”

There is no known patch available for the plugin and users are cautioned to take necessary actions such as uninstalling the plugin to mitigate risk.

The plugin is currently unavailable for download with a notice showing that it is under review.

Screenshot Of Malcure Plugin At WordPress Repository

Read More WordPress News

WordPress Update 6.8.2 – Ends Security Support For 0.9% of Sites

Featured Image by Shutterstock/Kues

WordPress Update 6.8.2 – Ends Security Support For 0.9% of Sites via @sejournal, @martinibuster

WordPress released a maintenance update that contains twenty changes to the core and fixes fifteen issues in the Gutenberg block editor. WordPress also announced that it is dropping security support for WordPress versions 4.1 to 4.6.

Short-Cycle Maintenance Release

This is a maintenance release that incrementally makes WordPress a smoother experience.

Some of the fixes that are representative of what’s in this release:

Dropping Security Support

WordPress announced that it is dropping support for versions 4.1 through 4.6. According to the official WordPress stats, only 0.9% of websites are using those versions of WordPress.

Statement on release page:

“Dropping security updates for WordPress versions 4.1 through 4.6
This is not directly related to the 6.8.2 maintenance release, but branches 4.1 to 4.6 had their final release today. These branches won’t receive any security update anymore.”

Another WordPress page provides more information:

“As of July 2025, the WordPress Security Team will no longer provide security updates for WordPress versions 4.1 through 4.6.

These versions were first released nine or more years ago and over 99% of WordPress installations run a more recent version. The chances this will affect your site, or sites, is very small.”

Read the official WordPress 6.8.2 announcement:

WordPress 6.8.2 Maintenance Release

Read More WordPress News

Malware Discovered In Gravity Forms WordPress Plugin

Featured Image by Shutterstock/Praew stock

Malware Discovered In Gravity Forms WordPress Plugin via @sejournal, @martinibuster

WordPress security company Patchstack published an advisory about a serious vulnerability in Gravity Forms caused by a supply chain attack. Gravity Forms responded immediately and released an update to fix the issue.

Supply Chain Attack

Patchstack has been monitoring an attack on a WordPress plugin in which the attackers uploaded an infected version of the plugin directly to the publisher’s repository and fetched other files from a domain name similar to the official domain. This, in turn, led to a serious compromise of websites that used that plugin.

A similar attack was observed in Gravity Forms and was immediately addressed by the publisher. Malicious code had been injected into Gravity Forms (specifically in gravityforms/common.php) by the attackers. The code caused the plugin, when installed, to make HTTP POST requests to the rogue domain gravityapi.org, which was registered just days before the attack and controlled by the attacker.

The compromised plugin sent detailed site and server information to the attacker’s server and enabled remote code execution on the infected sites. In the context of a WordPress plugin, a remote code execution (RCE) vulnerability occurs when an attacker can run malicious code on a targeted website from a remote location.

Patchstack explained the extent of the vulnerability:

“…it can perform multiple processes:

  • Upload an arbitrary file to the server.
  • List all of the user accounts on the WordPress site (ID, username, email, display name).
  • Delete any user accounts on the WordPress site.
  • Perform arbitrary file and directory listings on the WordPress server.”

That last one means that the attacker can view any file, regardless of permissions, which would include the wp-config.php file which contains database credentials.

Gravity Forms Responds

RocketGenius, the publishers of Gravity Forms, took immediate action and uploaded a fixed version of the plugin right away, on the very same day. The domain name registrar, Namecheap, suspended the rogue typosquatted domain which effectively blocked any compromised websites from contacting the attackers.

Gravity Forms has released an update to the plugin, version 2.9.13. Users may want to consider updating to the very latest version.

Read more at Patchstack:

Malware Found in Official Gravity Forms Plugin Indicating Supply Chain Breach

Featured Image by Shutterstock/Warm_Tail

Payment Processor Startup Finix Announces WooCommerce Plugin via @sejournal, @martinibuster

Finix, a payment processing company, has launched a new WooCommerce plugin that enables WordPress merchants to integrate embedded payments directly into their stores. The new plugin enables WooCommerce merchants to accept all major credit cards, as well as Apple Pay and bank transfers. Setting up via the WooCommerce plugin is easy and is said to take only ten minutes to set up and start accepting payments.

Features available through the plugin:

  • “Flexible Payment Methods: Accept major credit and debit cards, Apple Pay, and bank transfers. Offer flexibility customers expect and reduce checkout friction.
  • Transparent Pricing: Finix uses interchange-plus pricing for clear, detailed fee breakdowns, ideal for high-volume merchants.
  • Apple Pay Integration: Enable Apple Pay on supported browsers like Safari and Chrome, with customizable button styles and types that blend seamlessly into your storefront.
  • Customizable Checkout Display: Match your brand’s voice by tailoring the look and language of each payment method for a more intuitive customer experience.
  • WooCommerce Blocks Checkout Compatible Fully supports WooCommerce’s new block-based checkout and the classic flow, keeping your store aligned with the latest updates.
  • Automated Dispute & Bank Return Handling Reduce operational overhead with automatic order status updates triggered by webhook events.”

Finix is a payment processor that was founded in San Francisco in 2015. It has received funding from major Silicon Valley venture capitalists and is regarded as a rising competitor to companies like Stripe.

Finix claims that merchants report faster payouts using its systems and that it offers a streamlined checkout flow.

Read more about the Finix announcement:

Enhance Your WooCommerce Checkout with the Power of Finix Payment Gateway

Featured Image by Shutterstock/Tapati Rinchumrus

Best WordPress SEO Tools & Plugins For Enterprise Sites

When it comes to enterprise SEO, you need more than just the basics. You need tools that scale, provide deep insights, and plug seamlessly into your WordPress ecosystem.

Enterprise businesses require a scalable, credible, and reliable website. While many organizations invest in expensive platforms that consume a significant portion of their budget and come with limited support, WordPress offers a powerful alternative without the hefty annual software fees.

The latest version of WordPress (6.8) has been downloaded over 28 million times. There are also over 59,000 plugins and 13,000 free themes.

This is a testament to the core WordPress development team’s ability to improve the platform and meet modern business needs.

Let me break down the best WordPress SEO tools as I see them that will help your enterprise site boost rankings, improve core web vitals, and gain visibility in even the most competitive markets.

Top 8 WordPress Plugins And Tools For Enterprise Sites

WordPress plugins and tools can assist in optimizing your site and improve site security, performance, and speed.

But, with so many different plugins and tools in the market today, how do you choose the right ones that will improve your site’s visibility?

To help you avoid an SEO disaster, let’s take a look at the top WordPress tools and plugins for search optimization of enterprise brands.

1. All In One SEO (AIOSEO)

Made popular by over 3 million users, AIOSEO offers a comprehensive toolkit and setup wizard for you to establish SEO settings for your website quickly.

The checklist includes features like meta tag generators, titles, descriptions, rich snippets, schema markup, and XML sitemaps.

For tech-savvy users, AIOSEO gives you complete control of robots.txt, local SEO, RSS videos, and video and photo optimizations. It also allows enterprises to assign user roles to employees or contractors.

2. BrightEdge

BrightEdge provides AI-powered data-driven solutions to help you manage your SEO and content performance to convert more users into customers.

You can leverage BrightEdge throughout every stage of content optimization: discovering your target audience’s search demand, creating impactful content, and measuring results to scale.

With powerful data insights like share of voice, opportunity forecasting, and ContentIQ, your content is more likely to capture your audience’s attention and boost SEO efforts.

This is especially effective for sites with complex structures or multiple departments contributing content.

3. Semrush

Semrush allows you to find all the organic keywords and search terms that your website can rank.

It also provides a competitive analysis of how your competitors rank, so you know how to gain an edge over their SEO strategy.

Our enterprise clients using Semrush reduced keyword blind spots by ~64% after refining their strategy using the Keyword Magic Tool.

With Semrush’s Writing Assistant Tool, you can also improve your existing WordPress content with targeted focus keywords to help you make the top 10 results.

I, however, like their backlink tracking capabilities the best.

4. Yoast SEO

In our work across dozens of enterprise WordPress deployments, Yoast SEO lets you easily update descriptions, titles, and social media images throughout your website.

With a user-friendly platform, Yoast SEO automatically creates an XML sitemap to make it easier for search engines to crawl your website and import data from other plugins.

You also have complete control of your site breadcrumbs and premium loading times. (While Yoast is the gold standard, I would also highly consider RankMath.)

5. Ahrefs

Ahrefs is an all-in-one SEO tool that helps optimize your website, analyze industry content, and study your customers’ top keywords to help you improve.

With Ahrefs, you can track your ranking progress and learn from your competitors’ content to deliver a high-ranking website that builds authority.

Additionally, Ahrefs offers enterprise-level support with unique features, including multiple user seats, personalized customer support, daily updates, and more, to help your business grow globally.

6. NitroPack

With over 240,000 websites using NitroPack, it’s a popular performance plugin.

NitroPack helps increase your speed score by 60% and improves your core web vitals, which can provide a better experience to users.

Enterprise teams we work with prioritize core web vitals for performance and SEO.

One client we worked with in the energy sector saw a 42% boost in mobile conversions after optimizing core web vitals with NitroPack.

It offers advanced features such as caching, a built-in CDN, and HTML optimization on a user-friendly platform.

7. MonsterInsights

Instead of relying on SEO assumptions, MonsterInsights provides you with all the insights you need to improve search rankings by connecting Google Analytics to your WordPress site.

MonsterInsights shows you top content, how users interact on your site, and connects ecommerce SEO.

Also, MonsterInsights provides over 100 data points to help you make better marketing decisions through real-time analytics.

Bonus Tool: DemandSphere

In my recent experience, DemandSphere has been a valuable tool for managing SEO at scale, especially when working with enterprise clients across multiple regions or business units.

Its AI-powered insights helped me surface priority keywords and content gaps, especially across large or multi-regional sites.

In one case, we used its predictive models to reorganize a content roadmap, which led to measurable improvements in mid-funnel visibility.

One of the features I find especially useful is the ability to segment data by market or product line, which helps clarify where to focus our efforts.

Is WordPress Good For Enterprises?

Here are a few reasons why WordPress is great for enterprises:

  • Ongoing support as opposed to proprietary systems that provide more flexibility and customization.
  • Robust content editing experience with WordPress Gutenberg and accessibility standards.
  • High-level security that keeps you protected against cyberattacks.
  • Scalable infrastructure with consistent themes and plugins to help reach your goals.
  • Huge cost savings by not having to pay hefty licensing costs compared to competitors like Adobe, Magento, and HubSpot.

Since WordPress is open-source software, your business has access to an endless pool of designers, developers, and specialized agencies, along with a massive community that is always ready to collaborate, innovate, and troubleshoot together.

With millions of WordPress websites live, the user community allows you to leverage best practices and implement them within your own system, instead of relying on inconsistent customer service or a limited FAQ page from closed-off systems.

WordPress includes several built-in features that help you better optimize your site, and has many plugins that can support SEO (some mentioned above).

These are a few reasons why WordPress can support the SEO for an enterprise site:

  • Permalinks: Customize your permalinks with targeted keywords to increase your click-through rate.
  • Metadata: Automatically add title and meta description to every post or page on your website to improve your position.
  • Images: Optimize your images by using keywords in the ALT text, description, and caption, and improve your page speed by editing the size.
  • User experience: Develop a well-designed site that enhances the user experience to increase page views, conversions, and session times.
  • Site speed: Select the right themes and plugins that help you maintain a fast-loading time.
  • Mobile-friendly: Use a mobile-responsive theme to ensure it’s the same quality as the desktop version for a better user experience.
  • Social media: Increase your brand visibility by including social media share and follow buttons on your website.
  • Integration: Seamlessly integrate your WordPress site with other software like G Suite, Google Analytics, ConvertKit, and more.

Scale Your WordPress Enterprise Website With SEO

Is WordPress enterprise-ready?

Combined with powerful plugins and themes, WordPress’s content management system is more than ready to handle the needs of a complex enterprise website.

With WordPress, you can scale your website with flexible infrastructure and reliable SEO features.

We’ve implemented this setup across various industries, including manufacturing, healthcare, and legal, each with its own unique technical and SEO requirements.

WordPress is one of the best platforms for SEO. Not only does the system provide SEO features, but the available plugins also make it easy for your website to start building authority and boost its overall rankings.

Continue optimizing and adapting to maintain long-term growth. The key is to keep your SEO strategy evolving to keep up with the changes in the industry.

More Resources:


Featured Image: hasan as’ari/Shutterstock

How To Efficiently Plan A WordPress Site

The most exciting moment of your new WordPress project is right at the beginning. You have an idea that one day, you hope will soon be shared with the world. But it can also be overwhelming.

WordPress has countless plugins that do pretty much everything under the sun. In fact, the WordPress ecosystem has doubled in terms of plugin submissions in 2025.

So, which ones should you use?

In this post, I will talk through how I plan to build a WordPress website.

Why You Should Plan A WordPress Site

To plan a WordPress site really is a must-do process that reduces the risk of the project spiralling in time and cost.

Spending an hour or two following a simple checklist, like the one I’ve detailed below, puts you and the client on the same page when building the website.

Time and again, I’ve seen projects that’ve undefined elements that need to be factored in, which eliminates potential scope creep.

It will also give you a list of tasks, so as well as avoiding scope creep, you can easily transfer the elements of your plan into your project management tool as tasks and milestones. That will speed up development time.

Define Your WordPress Website Goals

The first thing you should do is define the goals of the website. The easiest way to begin this process is to ask yourself the following two questions:

  1. Where are your visitors most likely to come from?
  2. What do you wish them to do when you’re on the website?

Assuming that the site is a brochure site, then more than likely, you’d want your visitors to come from search engines, and you want them to contact you.

That way, you’ll need a plugin like Yoast SEO or Gravity Forms.

You may have other goals, like growing a newsletter or an ecommerce store. Or you may get traffic from a social media platform that your blog needs to integrate with.

Each of these needs to be defined, as this will help define your tech stack.

Goals Defined? Great. Now, Plan The Layout

Once you’ve defined your goals, you need to think about the layout and what custom work you will need to do.

When building your site, I prefer to think of templates, rather than pages.

You don’t need a template for every blog post, for example. If you are building a website for a solicitor, for example, all services it offers (e.g., Conveyancing/Wills & Probate) could run off a similar template, cutting build time.

This is not necessarily true if you’re using a page builder, as sometimes page builders treat each individual page separately.

You could also look at custom post types and taxonomies for certain pages.

For example, if you have a “Meet the Team” page, then every person could be their own post. This makes maintenance a lot easier, as it allows a new team member to be easily integrated without too much trouble.

Testimonials work well as a custom post type as you can create a “bank” of them to use throughout the site.

Once you’ve got the structure of the site and what you are using to build it, that should be the templates.

Generally, for a brochure site with a blog and a “Meet the Team” section, you would have the following templates:

  1. Home Page Template.
  2. About Page Template.
  3. Contact Us Page Template.
  4. News Post Template (Single).
  5. News Post Template (Archive).
  6. Team Member Template (Single).
  7. Team Member Template (Archive).
  8. Catch All Template.

The “Catch All” template I find useful as it’s used for pages that are present but don’t need much design, something like a Terms & Conditions or your Privacy Policy pages.

I tend to start with these first, as you can build a header/footer easily enough here.

Finally, you may want to consider whether you have multiple languages or if you have different regional offices. A large site may be better suited for a multisite, rather than an individual WordPress installation.

Once done, you should have a WordPress theme and a WordPress plugin ready to build.

My general thought is that any WordPress functionality you wish to retain when redesigning should be in a plugin, rather than a theme.

Things like definitions of custom post types or SEO changes you make programmatically are ideal for a custom plugin.

Depending on the complexity of the project, it could mean that you split functionality into a number of plugins.

For example, I have an ecommerce site where their custom invoicing is in one plugin, and the voucher management is in another plugin. There is also the “helper” plugin that has minor performance improvements and a custom post type.

Don’t Forget The Ancillaries!

Of course, a well-built WordPress theme, with a range of custom and supporting plugins, is just the beginning. Your website needs content.

If you are a marketing agency, you may be responsible for the creation of the content, but what about imagery? It’s a good idea to define in the WordPress site planning things like who is responsible for the content.

If you are using the content of the old site, it’s a good idea to define who handles the migration, or at the very least be aware if it’s transferable – not all content systems are!

Other things to define in your WordPress site plan are training, who will have access to the site, and what level. Ideally, you want as few administrators as possible.

If you are pushing a new design to an existing site, there’s an approach of making everybody but yourself authors or editors, and see who complains about lacking access. That works remarkably well!

The First Step Comes With Experience

In reality, the more you create plans and pitches for WordPress websites, the more refined your toolset and your planning process become.

I already know the tools I’ll be using for the next 10, maybe 20 sites, with often very little variance among them. What works for a solicitor’s website will probably work for a cleaning firm.

I have a core group of about five to 10 plugins and two to three themes that I use, and then I add extra plugins as needed.

Those plugins are personal to me, but over time, you’ll build your own list of plugins. Doing so will make WordPress site planning far more efficient.

More Resources:


Featured Image: one photo/Shutterstock

Yoast SEO Plugin Bug Injects Hidden AI HTML Classes via @sejournal, @martinibuster

Yoast SEO rushed out an update to fix a bug that introduced a known fingerprint of AI-generated content. The bug was highlighted on social media, and Yoast corrected the error within hours.

HTML Classes Injected By AI

It’s recently become known that highlighting then copying content generated ChatGPT and then pasting it directly into the WordPress will cause HTML classes to be added to the content code. An HTML “class” is something that’s added to an HTML element like a paragraph element

, which can then be used to attach a style to it, like specifying a font. This bug only happens when a ChatGPT user highlights generated text, copies it, then pastes it into the WordPress editor. It won’t happen if the user clicks the ChatGPT “copy” icon to copy the generated content.

The HTML classes injected into content are “data-start” and “data-end” which are only visible within the code, not on the published content.

This is what the AI-generated content looks like in the HTML code:

“He thought no one would notice—
the quiet hum of the AI
churning out words
like it knew something.
Google noticed.
Now he shelves canned beans at Safeway.”

This is what the content would look like in the visible version:

“He thought no one would notice—
the quiet hum of the AI
churning out words
like it knew something.
Google noticed.
Now he shelves canned beans at Safeway.”

The “data-start” and “data-end” classes are the telltale clues that the content was generated by AI. Savvy SEOs are using that knowledge as part of their SEO audits to indentify AI-generated content that was directly copied and pasted into their WordPress editor.

Yoast SEO Premium Injects AI Classes

Alan Bleiweiss, known for content audits, called attention to the fact that Yoast SEO was injecting the “data-start” and “data-end” HTML classes into content. Alan called them “wrappers” but they’re technically HTML classes.

He posted:

“UPDATE

Yoast Plug-in pushed live without proper QA. Injecting AI wrappers without site owner permission.

Fortunately, according to Carolyn Shelby they’re working on a fix.

But tool providers need to do better.”

Alan indicated that no clarification was given as to how those classes were injected but the bug was limited to Yoast SEO Premium because the free version does not contain the necessary AI text generation feature (Yoast AI Optimize).

Yoast Pushes Update To Fix Bug

Yoast swiftly pushed an update, version 25.3.1, to fix the issue so that AI-generated content created by Yoast SEO Premium does not contain the classes. Happily, the updated plugin also removes the telltale HTML classes.

According to the Yoast SEO blog post announcement:

“Recently, we announced the rollout of Yoast AI Optimize for the Classic Editor in WordPress. …During the initial rollout, we discovered a technical issue where unintended classes were being added to content for some users. While these added classes are harmless and do not impact the functionality or appearance of your content, they should not have been added, that’s on us.

We take this seriously, and to maintain the quality you expect, we’ve been actively working on a solution. We’re pleased to share that a fix has now been released, and the issue has been resolved. For users already affected, we are automatically cleaning up the unintended classes as part of the fix, no action is needed on your part.”

The functionality was rolled out on June 2nd, which means that sites with affected content have been out there for at most two weeks.

The free version of the plugin has also been updated. The changelog offers this explanation:

“This is a maintenance release which is required to align with changes to Yoast SEO Premium 25.3.1.”

Can This Have Impacted Rankings?

It’s probably unlikely that this has affected rankings but at this point it’s unknown if Google would have noticed.  Google would have to specifically look for those classes which in themselves do not indicate anything about content quality. So again, it’s probably unlikely that this bug had an effect on search rankings.

Nevertheless users of the premium version of the Yoast SEO Plugin should update immediately to version 25.3.1 to fix any potential issues from this bug and users of the free version should update their versions as well, even though it’s not affected.

Featured Image by Shutterstock/Jihan Nafiaa Zahri

seo enhancements
How to find the perfect SEO-friendly WordPress theme

We’ve seen it happen so often. You have a great blog or site, and at some point, you decide to go for a new look and feel. There are a couple of things you’ll look at, usually in the order: layout/look and feel, usability, and optionally, room for advertising. If the theme meets your needs in all three of these points, you might download and install it. If that sounds familiar, this post describes how to find the perfect SEO-friendly WordPress theme!

Table of contents

Finding the right SEO-friendly WordPress theme

An SEO-friendly theme has quite a few things to take care of, and a lot of themes miss out on these. This overview should help to keep you out of trouble when you’re looking for a new theme. If you’re thinking of installing a new theme, please give the following points some thought. Keep in mind, your new theme should be accessible, compatible, customizable, integrable, and standards-compliant.

Define your needs

Whether you are in the market for a free theme, a premium theme, or want to hire a developer to build one especially for you, the first step is always the same: define your needs. Write down what the theme should do, now and in the future. You might not need an eCommerce option at this time, but what about in a year from now? What should your site look like? Which pages do you need? What types of content are you planning to publish? Once you have a clear picture of the requirements, you have a better chance of finding your dream theme.

Find a trusted reseller or developer. How’s the support?

Should you build a theme yourself? Or will a general free theme do? The discussion on whether a premium theme is better than a free theme continues to rage on. Both sides have their merits. There are loads of crappy free themes, but there are just as many crappy premium themes. What you should do is find a reseller or developer that you trust. Look for social proof; how many reviews does a theme get? Is there an active message board? When did it receive its last update?

While themes on WordPress.org undergo initial scrutiny for safety, it remains crucial to perform your own thorough checks. Also, vetting doesn’t mean they’re awesome. Theme resellers offer loads of premium themes in varying degrees of awesomeness. But just because you pay for them, doesn’t necessarily make them better than free themes. In addition to that, since you only receive the files when you pay for a theme, there’s no way to check the quality upfront. Despite social proof, it’s still a leap in the dark.

How flexible is the theme?

A static theme won’t do you any good when you want to change the page layout in a couple of months. Make sure to choose a theme that is flexible in its appearance as well as its functionality. Be sure that it supports blocks so you can use the block editor to fill the design. Don’t choose a design that screams for full-width images when you only need a well-presented place to write your poetry. Check what happens to a theme when you turn off all massive images; does it still function? And is it possible to change colors, fonts, and other visual elements? Many themes, like Total or GeneratePress, come with a number of demo examples that give you an idea of all the different styles they can handle.

Your SEO-friendly WordPress theme should have room for widgets, plus it should support featured images and offer multi-language support. Lots of themes have a page builder on board; these help you construct your bespoke layout. But, this is something you should be careful with because these could generate less than stellar code that hinders your SEO. Do check if your theme works well with site builders like Elementor. Also, modern themes like the Twenty Twenty-Five default theme work with block patterns that let you fine-tune your design.

Make sure your WordPress theme plays nicely with third-party plugins to boost your site’s functionality and SEO. Themes often come with built-in features, but these can sometimes clash with essential plugins. Make sure your chosen theme is flexible and well-coded to work smoothly with popular plugins like Yoast SEO, WooCommerce, and Elementor. This compatibility lets you enhance your site without dealing with conflicts or performance dips. Checking for plugin support makes sure that you can easily add features while keeping your site running securely and efficiently.

Which post and page templates does the theme support?

Another way to keep things flexible is for an SEO-friendly WordPress theme to offer multiple posts and page templates. That way, you could start off using a basic template with a main content area and a left sidebar, but have the flexibility to change to a full-width content area or one of the many other options. If a theme has only two choices, that might become problematic in the future. Pick a theme with enough sensible templates.

Does it function as a parent/child theme?

Parent and child themes are a great combo. If you use any of the theme frameworks like heavy-hitter Genesis, you know how powerful these are compared to regular themes. A child theme gets its functionality from a parent theme. So if you’re making changes to your child theme, the parent won’t see these. You won’t break the parent theme if you make a mistake. The same goes for updates; if you update your parent theme, which happens often, it won’t wipe the changes you’ve made to your theme because it’s a child and doesn’t contain the functionality.

Whether you need a theme framework depends on your needs. Almost all WordPress projects will benefit from a theme framework, but it might be overkill if you only need a tiny amount of its functionality and you know exactly what kind of theme you need.

Watch out for theme bloat

Many themes are bloated, which increases loading time. If the developer of a particular theme included everything but the kitchen sink, you might get a feature-complete product but an extremely complicated one as well. Try to find a theme that offers everything you need instead of everything there is. Your theme should be lean and mean.

Prioritize security

When choosing a WordPress theme, don’t overlook the importance of security. It’s important to select a theme that is well-maintained and regularly updated to fix vulnerabilities. Check if the theme has a solid security reputation by reading user reviews and checking update logs. Make sure it complies with secure coding standards and supports two-factor authentication and other security measures. Using themes directly from the official WordPress repository or trusted marketplaces adds an extra layer of assurance. Always test the theme with security plugins like Sucuri to identify potential issues before going live.

Check site speed and mobile-readiness

Your website should be mobile-friendly from the start. Its theme should load swiftly and provide an excellent page experience, reflected in strong Core Web Vitals scores. Opting for a lightweight, efficient theme could help you achieve this.

Begin by evaluating the theme’s responsiveness. Use tools like the Google Lighthouse to verify compatibility across various devices. Additionally, input the theme’s demo site URL into Google PageSpeed Insights to uncover any loading issues that might affect performance.

Remember, these tests offer a starting point, but they only provide part of the picture. For a complete assessment, test the theme’s speed on your actual server setup, as server performance can significantly influence load times.

Is the theme really SEO-friendly?

While Yoast SEO fixes a lot of WordPress’s SEO issues, a good theme helps a lot. Most WordPress themes will claim that they are SEO-friendly, but make sure to check them. One of the good examples is Twenty Twenty-Five, which offers a clean design that performs really well. Find out if the theme’s code is nice and clean or an intangible mess. Has it been updated recently? And will it be supported in the future? How many JavaScript libraries does the theme depend on? Does it support Schema.org structured data? If you’re eyeing a free theme, make sure there are no hidden links to the developer’s website, as this can hurt your SEO efforts. In general, keep Google’s Search Essentials documentation in mind when hunting for SEO-friendly WordPress themes.

Is the theme’s code valid?

Some theme authors are more designers than coders, and thus, they sometimes hack around until it finally looks the way they want without bothering to check whether the code they’ve written is valid HTML. If it’s not, current or future browsers might have issues rendering the content correctly. You can check whether the code is valid by using the W3C’s validator.

Test, test, and test again

Once you’ve chosen your favorite new SEO-friendly WordPress theme, it’s time to kick it into gear. Start with a development setup to test your new theme through and through. Run every type of test you can think of. This might be a security check with the Sucuri plugin or a theme check with the Theme Check plugin. Load your site with dummy data from wptest.io to see if every element is represented and functioning. Run pagespeed and mobile-friendliness tests to see if problems arise. Fix the issues, or find a new theme.

Bonus checks

That’s just to get you going. There’s a lot of stuff you can check before you install your brand-new theme. Start with these three checks, if you will:

Hooks

WordPress plugins use so-called “hooks” to be able to perform their designated tasks. These hooks allow, for instance, to add extra output, tracking codes, etc. A lot of issues with plugins will arise for you when a theme author forgets to add these hooks. This is how to check for them:

1. In header.php, it should have a small piece of PHP code that looks exactly like this wp_head(); or this do_action('wp_head');, usually just before a piece of HTML that looks like this: .

2. In footer.php, it should have another small piece of PHP like this wp_footer();, or this do_action('wp_footer');

3. In comments.php and/or comments-popup.php, there should be a piece of code like this: ID); ?>, just before the HTML tag.

Template files

Another wise thing to do when you’re changing themes is to compare theme files. If, for instance, your current theme has an author.php file, which contains the template for your author profiles, and your new one doesn’t have that, that might be an unpleasant surprise when you install the theme. The files you should be checking for in your old and new themes:

  • home.php: the homepage template.
  • single.php: the template for single posts.
  • page.php: the template for pages.
  • category.php: the template for category indexes.
  • author.php: the author template, used when someone wants to find all posts by a certain author.
  • date.php: the date template, used when someone tries to look at, for instance, a certain month of posts on your blog.
  • archive.php: this template is used when either category.php, author.php, or date.php isn’t there.
  • search.php: used when someone searches on your blog, a very important template to look at if you’re concerned about usability, and whether people can find posts on your blog.
  • 404.php is used when WordPress can’t find a certain post or page. It’s a very important template file to have!

How is your theme handling titles?

It’s essential to modernize how your theme manages page titles. While older practices involve directly altering the  tag in header.php, consider utilizing add_theme_support('title-tag'); in your theme’s functions.php. This setup allows WordPress and plugins like Yoast SEO to handle titles optimally, ensuring a flexible and SEO-friendly title structure.

// Add to your theme's functions.php
add_action('after_setup_theme', function() {
add_theme_support('title-tag');
});

Now, Yoast SEO can take care of all the titles. We have a great article on crafting good titles if you want to learn more.

A guide to finding SEO-friendly WordPress themes

If the theme you are looking at fits your goals and the points made in this article, you should be quite okay. For those of you with more tech skills, it’s also an option to go headless with WordPress if you want more flexibility. Good luck with your new theme!

Read more: Need help with WordPress? 10 tips to avoid common mistakes »