Plugins most WP sites need, and how to add them
Below are 2 or 3 free plugins for each of 6 common jobs. Or get CMSHands, our free plugin: a chat in your WP dashboard that picks one that fits your site and installs it once you say yes.
It installs plugins from the WP plugin directory only. Not premium plugins.
- Nothing changes without your OK
- Undo in one click, or a warning first
- No account, no password to share
Needs WP 6.3 to 7.1, PHP 8.0 or newer, and an administrator login. One site per install.
The download is a plugin. Turning it on connects your site to cmshands.com and adds 3 small rescue files. Deleting the plugin removes them and everything it stored. What we send
Backups: a copy of your whole site you can put back
| Plugin | Active installs | Rating | Last updated |
|---|---|---|---|
| All-in-One WP Migration and Backup | 5+ million | 4.5 out of 5 | Oct 7, 2026 |
| UpdraftPlus | 4+ million | 4.8 out of 5 | Sep 21, 2026 |
| Duplicator | 1+ million | 4.9 out of 5 | Sep 29, 2026 |
Or ask the chat in the plugin:
Find a backup plugin that works with my site and install it.
Security: protecting your login page
| Plugin | Active installs | Rating | Last updated |
|---|---|---|---|
| Wordfence Security | 5+ million | 4.7 out of 5 | Sep 30, 2026 |
| Really Simple Security | 3+ million | 4.9 out of 5 | Sep 15, 2026 |
| Limit Login Attempts Security | 1+ million | 4.8 out of 5 | Sep 23, 2026 |
Or ask the chat in the plugin:
Install a plugin that limits how many times someone can guess my password.
SEO: how your pages show up in search results
| Plugin | Active installs | Rating | Last updated |
|---|---|---|---|
| Yoast SEO | 10+ million | 4.8 out of 5 | Sep 29, 2026 |
| Rank Math SEO | 4+ million | 4.8 out of 5 | Oct 6, 2026 |
| All in One SEO | 2+ million | 4.7 out of 5 | Oct 7, 2026 |
Or ask the chat in the plugin:
Which SEO plugin would suit my site? Install one that works with it.
Contact forms: a form visitors fill in to reach you
| Plugin | Active installs | Rating | Last updated |
|---|---|---|---|
| Contact Form 7 | 10+ million | 4.0 out of 5 | Oct 11, 2026 |
| WPForms | 5+ million | 4.8 out of 5 | Oct 6, 2026 |
| Fluent Forms | 700,000+ | 4.8 out of 5 | Sep 30, 2026 |
Or ask the chat in the plugin:
Install a contact form plugin that fits my site.
Spam protection for your comments
| Plugin | Active installs | Rating | Last updated |
|---|---|---|---|
| Akismet Anti-spam | 5+ million | 4.7 out of 5 | Aug 18, 2026 |
| Antispam Bee | 700,000+ | 4.8 out of 5 | Aug 23, 2026 |
Or ask the chat in the plugin:
My blog comments are full of spam. Find a plugin to catch it and install it.
Email that arrives, sent through a mail service (SMTP)
| Plugin | Active installs | Rating | Last updated |
|---|---|---|---|
| WP Mail SMTP | 4+ million | 4.8 out of 5 | Oct 8, 2026 |
| FluentSMTP | 700,000+ | 4.8 out of 5 | Sep 27, 2026 |
| Post SMTP | 300,000+ | 4.7 out of 5 | Sep 24, 2026 |
Or ask the chat in the plugin:
Emails from my contact form never reach me. Install an SMTP plugin that fits my site.
The plugins named on this page are trademarks of their owners. CMSHands is not affiliated with any of them.
Watch it do this on a real site
You ask
You say what you need in plain words. You don't have to know a plugin's name. This run took two turns, the pick and then your yes, so each part shows its own time.
I need a simple booking calendar. Find a good plugin and install it.
It picks one
It searched the WP plugin directory (the free plugins at wordpress.org) and named one plugin, about 6 seconds after the question. It said how many sites use it, its rating, and that it fits the site's WP and PHP versions (PHP is the language WP runs on; your host sets its version). Then it asked before installing anything.
Events Manager is the one I'd pick — an events calendar and booking system (bookings, appointments, tickets), used on about 60,000 sites, rated 84%, updated three days ago and checked against your WordPress and PHP versions with nothing flagged. Say the word and I'll install and switch it on — installing runs the plugin's code on your site, so I'd rather you confirm first.
- 3 secondsSearching the WordPress plugin directory
You say yes
You reply “Yes, install Events Manager.” About 7 seconds later a card appears: a box in the chat that shows exactly what would change, marked Can be undone. Nothing is installed yet. From here on, times count from your reply.
Ready for you to review.
- 3 secondsSearching the WordPress plugin directory
- 6 secondsPreparing the change for your OK
You press the button
Only now does it install the plugin, from the WP plugin directory. The install itself took about 3 seconds on our test site. Then it checked that the plugin was there.
- 12 secondsInstalling a plugin
- 15 secondsChecking the change
It's installed
The card turns green, with an Undo link. Events Manager was installed and switched on. As it switched on, it made 5 pages of its own: Events, Locations, Categories, Tags and My Bookings.
Done. I checked afterwards, and the change is in place.
Undo, if you want
One press of Undo switched the plugin off and deleted it, and Events Manager was gone from the plugin list. The 5 pages it made and its settings stayed on the site. Delete those pages yourself in Pages.
Undone. I checked afterwards, and it's back the way it was.
- 21 secondsReverting the change
- 22 secondsChecking the change
A real run on our test site, Quillmoor Pottery (WP 7.1.3, Twenty Twenty-Four), Oct 11, 2026.
That's the whole job. The plugin is free: 3 changes to try it, no account. Nothing changes until you press the button.
Needs WP 6.3 to 7.1, PHP 8.0 or newer, and an administrator login. One site per install.
The download is a plugin. Turning it on connects your site to cmshands.com and adds 3 small rescue files. Deleting the plugin removes them and everything it stored. What we send
Why it won't wreck your site
Nothing changes until you press the button.
Asking changes nothing.
One click undoes it.
What it won't do here
Premium plugins
Setting the plugin up
Undo removes the plugin, not what it made
Each install counts as one change
- Nothing changes without your OK
- Undo in one click, or a warning first
- No account, no password to share
Needs WP 6.3 to 7.1, PHP 8.0 or newer, and an administrator login. One site per install.
The download is a plugin. Turning it on connects your site to cmshands.com and adds 3 small rescue files. Deleting the plugin removes them and everything it stored. What we send
Questions
What are the best WordPress plugins?
It depends on your site, but most sites need a plugin for 6 jobs: backups, security, SEO, a contact form, spam and email. For each job, pick one that many sites use and its makers keep updated. The tables above list 2 or 3 per job, with installs, ratings and update dates read from wordpress.org on Oct 11, 2026. Fewer plugins means fewer updates to keep up with.
Will these plugins work on my site?
Most will, if your WP and PHP are up to date. On Oct 11, 2026, all 17 plugins above said they were tested with WP 7.1.3. But the newest Contact Form 7 asked for WP 7.1 and PHP 8.3, so older sites can't install it. PHP is the language WP runs on; your host sets its version. When you ask the chat, it checks a plugin's needs against your site before it suggests one.
Does CMSHands make backups?
No. Before a change, it keeps a copy of only what that change touches, so it can undo it. That isn't a backup of your site. For that, install one of the backup plugins above, and keep a copy somewhere other than your host. Not sure you have one? Ask the chat “Is my site backed up?” and it tells you what it finds.
Will it set the plugin up for me?
We haven't tested that yet. It installs the plugin and switches it on once you press the button in the chat. Most plugins then add their own menu item or a Settings link, and you set it up there. Changed your mind? Undo switches the plugin off and deletes it. Pages a plugin made can stay, so look in Pages afterwards.
Is it free?
To start, yes: 3 changes with no account, then 10 a month once you add your email. Installing one plugin is one change. Questions are free, up to 30 a day (100 with your email), so asking which plugin fits your site costs nothing.
Written by CMSHands team. Checked on WP 7.1, Oct 11, 2026.
Try it on your own site
Needs WP 6.3 to 7.1, PHP 8.0 or newer, and an administrator login. One site per install.
The download is a plugin. Turning it on connects your site to cmshands.com and adds 3 small rescue files. Deleting the plugin removes them and everything it stored. What we send
Download the plugin.
It's free: 3 changes to try it. No account, no card.
Upload and activate it.
In your dashboard: Plugins › Add Plugin › Upload Plugin (Add New Plugin on older WP). Choose the file, press Install Now, then Activate Plugin.
Press Turn on.
Press Turn on CMSHands. No account, no key, no password.