Most WordPress problems come from a short list of causes: a plugin or update that clashes, an expired or misconfigured service, an attacker getting in, or a server that runs out of room. These ten come up again and again in our repair work. Each one has a quick fix and, more usefully, a way to stop it coming back.
Key takeaways
- Plugins cause more WordPress problems than anything else, from crashes to security holes.
- A tested backup turns most disasters into a short restore instead of a rebuild.
- Updating on a schedule, with a check afterwards, prevents more problems than it causes.
- Several of these problems are silent: lost enquiries and hidden malware don’t show an error.
What are the most common WordPress problems?
Here are the ten we’re asked to fix most often, in no strict order. Each links to a deeper guide if you need step-by-step help.
| Problem | Usual cause | Best prevention |
|---|---|---|
| Critical error or blank page | A plugin or theme clash | Test updates, keep backups |
| Site broke after an update | Incompatible plugin code | Update on a schedule, then check |
| Locked out of the admin | Lost password, security lockout, hack | Shared password manager, two-factor login |
| Slow pages | Heavy plugins, no caching, big images | Regular speed checks |
| Hacked or redirecting | Outdated plugins, weak passwords | Updates, firewall, scanning |
| Form emails not arriving | Server email without authentication | Send through a proper mail service |
| Database connection error | Overloaded or misconfigured database | Adequate hosting, monitoring |
| Broken links and 404s | Deleted or renamed pages | Redirects when content changes |
| “Not secure” warning | SSL expired or mixed content | Auto-renewing SSL, monitoring |
| Checkout not working | Payment plugin or settings change | Test orders after every update |
1. “There has been a critical error” or a blank white page
This is PHP stopping because some code failed, usually a plugin or theme. Since version 5.2, WordPress can pause the faulty plugin and email the admin a recovery mode link (WordPress.org). Our guide to the critical error message walks through the fix, and the white screen of death guide covers the older, blank version.
Prevent it: update one thing at a time, and keep a recent backup.
2. The site broke after an update
A plugin, theme or WordPress update changes code that something else relies on. The result might be a crash, a broken layout or a form that silently stops working. Roll back the one item that changed before reaching for a full restore. Our article on what to do when a WordPress update broke your site has the steps.
Prevent it: update on a schedule, test on staging for big updates and check key pages afterwards.
3. Locked out of WordPress
Forgotten passwords, a reset email that never arrives, a security plugin lockout or a former developer who owns the only admin account. Sometimes it’s a hack that removed your access. See our guide for when you can’t log in to WordPress.
Prevent it: keep at least two admin accounts you control, store logins in a password manager and turn on two-factor login.
4. The site has become slow
Speed usually fades gradually. Plugins pile up, images get bigger, the database fills with junk, and the hosting plan stays the same. Our guide to why a WordPress site is slow ranks the causes.
Prevent it: test your speed monthly, remove plugins you don’t use and resize images before upload.
5. Hacked, redirecting or showing spam
Visitors get sent to scam sites, Google shows spam pages, or your host suspends the account. Patchstack recorded 11,334 new WordPress vulnerabilities in 2025, and 91% were in plugins (Patchstack). Sucuri found 39.1% of infected content management systems were out of date (Sucuri).
A real clean-up removes backdoors and fake admin users, not just the visible malware. Sucuri found backdoors on 49% of compromised sites, which is why quick fixes so often fail. Our hacked website repair service handles the whole job, and our guide on why a website keeps getting hacked explains reinfection.
Prevent it: keep everything updated, use a firewall and malware scanning, and remove plugins you don’t need.
6. Contact form emails aren’t arriving
The form says “sent”, but nothing reaches your inbox. Usually the website is sending mail from the server without the authentication email providers now expect, so messages land in spam or vanish. Our guide to a contact form not sending email explains the fix.
Prevent it: send through an authenticated mail service and submit a test enquiry every month.
7. “Error establishing a database connection”
WordPress can’t reach its database. The cause might be wrong login details after a move, a database server that’s down or overloaded, or corrupted tables. See our guide to the database connection error.
Prevent it: choose hosting with enough memory, and use uptime monitoring so you hear about it first.
8. Broken links and 404 errors
Pages get renamed or deleted, and links from menus, other pages and Google lead nowhere. Visitors leave, and search engines notice. Learn how to fix broken links without losing rankings.
Prevent it: add a redirect whenever you remove or rename a page, and run a link check monthly.
9. “Not secure” warnings
Browsers warn visitors when the SSL certificate has expired or some images and scripts still load over plain HTTP. Let’s Encrypt certificates last 90 days, so renewal has to run automatically and reliably (Let’s Encrypt). Our guide to the “Not secure” warning covers both causes.
Prevent it: use hosting with auto-renewing SSL and monitoring that alerts you before a certificate lapses.
10. The checkout has stopped working
Payments fail, the order button does nothing or orders stay “pending”. The usual causes are a payment plugin update, an expired API key or a caching rule catching the checkout. Our guide to a WooCommerce checkout not working helps you tell a broken checkout from normal cart abandonment. For a store losing sales right now, see our emergency WordPress repair guide.
Prevent it: place a real test order after every update to WooCommerce or your payment plugin.
What do most of these problems have in common?
Look at the prevention lines and a pattern appears. Most come down to four habits: update carefully, keep tested backups, monitor the site and test what matters after changes. None is difficult, but all of them need doing every month, which is where busy owners fall behind.
When something does break, speed matters. Our fast WordPress repairs fix the problem and find the cause, so it doesn’t return. If you’d rather have someone to ask before small issues grow, our website support is there for that.
The cheaper path is preventing them. Our website maintenance plans include updates, off-site backups, malware scanning, uptime monitoring and a monthly report. Advantage and Elite also repair anything an update breaks.
Frequently asked questions
What is the most common cause of WordPress problems?
Plugins. They cause most crashes after updates, most compatibility clashes and most security holes. Patchstack found 91% of new WordPress vulnerabilities in 2025 were in plugins. Fewer, well-maintained plugins, kept up to date, prevent a large share of the problems on this list.
Can I fix WordPress problems myself?
Many, yes, if you have a backup and access to your hosting control panel. Our linked guides walk through each one. Hacks, database errors and broken checkouts are riskier, because a wrong step can lose data or leave malware behind. Get help for those.
How do I stop my WordPress site breaking after updates?
Take a backup first, update one thing at a time and check your key pages, forms and checkout afterwards. Test major updates on a staging copy. Don’t skip updates to avoid breakages, because outdated plugins are the main way sites get hacked.
How much does it cost to fix a WordPress problem?
It depends on the problem and how long it takes to find the cause. A plugin clash can take minutes, while a hack clean-up takes much longer. A maintenance plan spreads the cost and prevents many issues, so compare a year of plans against a year of one-off fixes.
What should I do first when my WordPress site breaks?
Note exactly what you see and what changed recently, such as an update or a new plugin. Don’t start deleting things. Check whether you have a recent backup. If the site is down, hacked or losing sales, call for help straight away rather than experimenting on the live site.
Sources
- WordPress 5.2 “Jaco”, WordPress.org, 7 May 2019
- State of WordPress Security in 2026, Patchstack
- 2023 Hacked Website and Malware Threat Report, Sucuri, June 2024
- FAQ, Let’s Encrypt