---
title: "Common WordPress problems that cost enquiries | PostCliq"
description: "Silent contact forms, out-of-date plugins, slow pages and hidden pages: the WordPress problems that cost enquiries, how to spot them and who fixes them."
url: "https://postcliq.com/blog/common-wordpress-problems"
---

# Common WordPress problems that quietly cost enquiries

The WordPress problems that cost the most are the quiet ones: form emails that never arrive, out-of-date plugins, slow mobile pages and pages hidden from search. How to spot each one and who should fix it.

By [Nirmal Gyanwali](https://postcliq.com/blog/author/nirmal-gyanwali) Updated 30 September 2026 9 min read

On this page

1. The short answer
2. What are the most common WordPress problems?
3. Why do WordPress contact forms stop sending enquiries?
4. Why are out-of-date plugins the biggest WordPress risk?
5. How do plugin bloat and conflicts show up?
6. Can WordPress settings hide your site from Google?
7. Why is my WordPress site slow?
8. Who should you call for WordPress help?
9. What to do next
10. Frequently asked questions

## The short answer

Key takeaways

- The WordPress problems that cost the most enquiries are the quiet ones: contact forms whose notifications never arrive, out-of-date plugins, slow mobile pages and pages accidentally hidden from search.
- Patchstack counted 11,334 new vulnerabilities in the WordPress ecosystem in 2025, and 91% of them were in plugins, not in WordPress itself.
- A contact form can show "thank you" to the visitor while the notification email lands in spam or never sends at all.
- Most of these problems are visible from the outside, so a marketing manager can find them in an hour without logging in to anything.
- Each problem has a clear owner: the marketing team, the developer or the host. Problems persist when nobody owns them.

The most common WordPress problems are rarely the dramatic ones. A hacked homepage gets noticed in an hour. A contact form that stopped emailing the sales team three weeks ago does not. WordPress runs [40.2% of all websites](https://w3techs.com/technologies/details/cm-wordpress) (W3Techs, September 2026), and its flexibility is why these problems are common: every plugin, theme and host adds a moving part. Patchstack found [91% of the 11,334 new WordPress vulnerabilities disclosed in 2025 were in plugins](https://www.patchstack.com/whitepaper/state-of-wordpress-security-in-2026/) , and only six were in WordPress core.

This guide lists the problems that quietly cost enquiries, how to spot each one from the outside, what it costs, and who should fix it. It is written for marketing managers who own a WordPress site but are not developers.

## What are the most common WordPress problems?

The most common WordPress problems for a business site are broken or silent contact forms, out-of-date plugins and themes, slow pages on mobile, plugin conflicts after updates, pages hidden from search by a setting or plugin, and missing conversion tracking. Most can be spotted without a login. The table ranks them by how quietly they cost enquiries.

| Problem | Symptom you can see | Business cost | Fix | Who fixes it |
| --- | --- | --- | --- | --- |
| Form notifications not arriving | Visitors see "thank you"; the inbox gets nothing, or the email is in spam | Enquiries lost with no error anywhere | Send through an authenticated mail service; store entries in the dashboard; test monthly | Developer, host |
| Form broken after an update | Submit button spins, errors, or the form is missing | Every enquiry from that page lost until someone notices | Test forms after every update; keep a staging copy | Developer |
| Out-of-date plugins and themes | Dashboard shows pending updates; Site Health flags them | Security exposure; one exploited plugin can take the site down | Update weekly on staging first; remove unused plugins | Developer, host |
| Slow mobile pages | Main content takes more than 2.5 seconds to appear | Fewer visitors reach the form; weaker search performance | Caching, image compression, fewer scripts | Developer, marketing team |
| Plugin bloat and conflicts | Layout breaks, features stop working, admin is slow | Staff time, fragile site, slower pages | Audit every plugin; one job per plugin; remove the rest | Developer |
| Hidden from search | Pages missing in Google; "Discourage search engines" ticked; noindex left on | Organic enquiries fall with no obvious cause | Check the Reading setting, robots.txt, sitemap and noindex tags | Marketing team, developer |
| Missing or broken tracking | GA4 shows sessions but no form submissions | Nobody knows which channel produces enquiries | Track form submissions as key events; test after changes | Marketing team, developer |
| Inaccessible forms | Fields without labels; errors only shown in colour | Some visitors cannot complete the form | Label every field; clear error messages | Developer |
| Expired content and dead links | Old offers, departed staff, buttons that return 404 | Trust drops on the pages closest to an enquiry | Quarterly content review of key pages | Marketing team |

Source: PostCliq analysis

The problems at the top of the table are the worst because they fail silently. A slow page is annoying but visible. A form that does not deliver looks perfect to everyone except the customer who never hears back.

## Why do WordPress contact forms stop sending enquiries?

WordPress contact forms most often stop delivering enquiries because the notification email is sent from the web server without proper authentication, so Gmail and Microsoft treat it as suspicious and file it as spam or reject it. The form still says "thank you". Nobody notices until someone asks why enquiries have dried up.

Google tightened the rules in February 2024. Gmail now requires every sender to [set up SPF or DKIM authentication](https://support.google.com/a/answer/81126) , and bulk senders of more than 5,000 messages a day must also publish DMARC. A form notification sent from a generic server address, claiming to be from your domain, can fail those checks. The result is an enquiry that exists nowhere except, sometimes, in a spam folder.

The fix is not complicated, but it needs a developer or host:

- Send form email through an authenticated mail service using your own domain, with SPF and DKIM set up.
- Store every submission in the WordPress dashboard as well as emailing it, so nothing is lost if email fails.
- Send notifications to a shared inbox, not one person who might leave.
- Submit a test enquiry every month and after every plugin update, and check it arrives in the inbox, not spam.

Forms also lose people before they submit. Zuko's form analytics data shows [34% of people who start a form do not finish it](https://zuko.io/blog/8-surprising-insights-from-zukos-benchmarking-data) , and contact forms convert worse than any other form type. Zuko sells form analytics and does not publish its sample, so treat the figure as directional. Accessibility matters here too: the WebAIM Million found [missing form labels on 51% of the top one million home pages](https://webaim.org/projects/million/) in 2026. For the form itself, see [contact form best practices](https://postcliq.com/blog/contact-form-best-practices) and the [enquiry form review kit](https://postcliq.com/resources/enquiry-form-review-kit) .

### What a silent form actually costs

Here is the arithmetic for an illustrative site. The figures are invented to show the method.

- The site normally receives 60 enquiries a month, about 2 a day.
- A plugin update breaks email delivery, and nobody notices for three weeks, which is 21 days.
- 21 days at 2 a day is about 42 enquiries that were submitted and never seen.
- If 20% would have become clients worth AUD 3,000 each, that is about 8 clients (8.4), or roughly AUD 25,000 of work nobody knew was offered.

The cost is not the plugin. It is the gap between the failure and someone noticing. A monthly test submission shortens that gap from weeks to days.

**How PostCliq checks this.** PostCliq reads your forms and calls to action on up to 50 public pages: whether a form exists where it should, how many fields it asks for, whether fields are labelled and whether buttons lead somewhere. It never submits a form, by design, so it cannot tell you whether the email arrives. That test stays with you.

## Why are out-of-date plugins the biggest WordPress risk?

Out-of-date plugins are the biggest WordPress risk because almost all WordPress vulnerabilities are in plugins, many have no fix when they are made public, and attackers move within hours. Patchstack found 91% of 2025's vulnerabilities were in plugins. Keeping plugins updated, and removing unused ones, removes most of the risk a marketing team can influence.

WordPress security in 2025, from Patchstack

**11,334** new vulnerabilities found in the WordPress ecosystem in 2025, up 42% [Patchstack, 2026](https://www.patchstack.com/whitepaper/state-of-wordpress-security-in-2026/)

**91%** of those vulnerabilities were in plugins; only six were in WordPress core [Patchstack, 2026](https://www.patchstack.com/whitepaper/state-of-wordpress-security-in-2026/)

**5 hours** median time to mass exploitation for heavily targeted flaws [Patchstack, 2026](https://www.patchstack.com/whitepaper/state-of-wordpress-security-in-2026/)

Two limits apply. Patchstack sells virtual patching, so it has an interest in the numbers being large. And it counts disclosed vulnerabilities, many in plugins with few installs. The picture is still clear: [46% of 2025's vulnerabilities had no fix at public disclosure](https://www.patchstack.com/whitepaper/state-of-wordpress-security-in-2026/) , so even a diligent updater is exposed for a while, and a plugin nobody uses is risk with no benefit.

WordPress's own documentation puts it plainly.

> Plugins extend your site's functionality with things like contact forms, eCommerce, and much more. That means they have deep access to your site.

WordPress.org documentation, Site Health screen

That line comes from the [Site Health screen documentation](https://wordpress.org/documentation/article/site-health-screen/) , which flags pending plugin updates as a critical issue. You can see the same warnings yourself under Tools > Site Health.

### What should a marketing manager ask for?

Ask your developer or host three questions. How often are plugins updated, and is it tested on a staging copy first? When were unused plugins last removed? When was a backup last restored as a test, not just taken? If any answer is vague, the site is running on luck.

## How do plugin bloat and conflicts show up?

Plugin bloat shows up as a slow site, a slow dashboard and features that break after updates. Conflicts happen when two plugins try to do the same job, or when one update changes something another depends on. The cure is fewer plugins, each with one clear job, updated on a staging copy before the live site.

Page builders are a common source of weight. Elementor alone runs on [31.5% of WordPress sites](https://w3techs.com/technologies/details/cm-wordpress) (W3Techs). A builder is a reasonable choice for a marketing team that wants to edit pages. The problem starts when a site has a builder, three add-on packs for it, a separate slider plugin, two form plugins and an abandoned popup tool, all loading on every page.

A practical plugin audit for a marketing manager:

1. Export the plugin list from Tools > Site Health > Info, which lists active and inactive plugins with versions.
2. Next to each plugin, write the job it does and who asked for it.
3. Mark any plugin nobody can explain, any inactive plugin, and any two plugins doing the same job.
4. Hand that list to your developer to remove or consolidate, on staging first.

## Can WordPress settings hide your site from Google?

Yes. One tick box in WordPress can ask search engines not to index the whole site. It sits under Settings > Reading as "Discourage search engines from indexing this site", and it is often left on after a site moves from staging to live. SEO plugins can also add noindex tags to pages by mistake.

WordPress's Site Health screen reports this setting directly under "Is this site discouraging search engines?" ( [WordPress documentation](https://wordpress.org/documentation/article/site-health-screen/) ). Other common causes are a robots.txt file copied from a staging site, a sitemap that lists old addresses, and category or service pages set to noindex by a plugin default. Each one quietly removes pages from search without breaking anything a visitor would notice.

PostCliq checks search access on every audit: robots.txt, the sitemap and the indexing signals on each page it reads. It also checks whether AI search crawlers can reach the site, which matters as more buyers ask ChatGPT and Google's AI features before they click.

## Why is my WordPress site slow?

A WordPress site is usually slow because of hosting, missing page caching, oversized images or too many scripts from plugins and tags. It is a common problem: only 45% of WordPress sites pass all Core Web Vitals on mobile, according to the HTTP Archive Web Almanac 2025. Speed deserves its own guide, because the causes and fixes are specific.

The [HTTP Archive Web Almanac 2025](https://almanac.httparchive.org/en/2025/cms) puts WordPress behind Wix (74%) and Duda (85%) on mobile pass rates. That is a gap in how sites are built and hosted, not a limit of WordPress. The full diagnosis, with a test you can run in 20 minutes and a table of causes and owners, is in [why is my WordPress site so slow](https://postcliq.com/blog/why-is-my-wordpress-site-slow) .

## Who should you call for WordPress help?

Call your host for server, email delivery, backups and PHP versions. Call your developer for plugins, forms, themes and anything that needs code. Keep content, images, tracking checks and form tests with the marketing team. When nobody owns WordPress, problems pile up until a rebuild looks like the only option, which it rarely is.

Before you decide a site needs rebuilding, check whether the problems are fixable. The [questions to ask before you rebuild your website](https://postcliq.com/blog/questions-before-you-rebuild-your-website) help separate a tired site from a broken one. When you do brief someone, the [website fix brief template](https://postcliq.com/resources/website-fix-brief-template) turns each problem into a ticket they can price.

For hands-on work, WP Creative, an Australian website growth agency, builds and maintains WordPress sites; WP Creative reports more than 10 years in business and more than 1,200 websites delivered. PostCliq is WP Creative's free website audit: it finds the public problems, and a developer or agency fixes them. For the full structured pass, use the [WordPress audit checklist for marketing teams](https://postcliq.com/blog/wordpress-audit-checklist) .

## What to do next

1. Submit a test enquiry through every form on your site today. Check it arrives in the right inbox, not spam, and note how long it took.
2. Open Tools > Site Health and send any critical issues to your developer with a date.
3. Export your plugin list and mark every plugin nobody can explain.
4. Check Settings > Reading and confirm "Discourage search engines" is unticked.
5. Run a [free PostCliq audit](https://postcliq.com/#try-postcliq) to find the public problems across up to 50 pages, with three quick wins to make first. See the [WordPress audit page](https://postcliq.com/wordpress-audit) for what the public check covers today.
6. Browse every guide on [WordPress performance](https://postcliq.com/blog/topic/wordpress) .

## Frequently asked questions

### Is WordPress down, or is it just my site?

WordPress itself is software, so it cannot be "down" for everyone. WordPress.com, the hosted service, has a status page. If only your site is down, the cause is almost always your host, an expired domain or certificate, or a plugin error after an update. Check your host's status page first, then ask your developer to look at recent changes.

### Why is my WordPress contact form not sending emails?

Usually because the notification is sent from the web server without SPF or DKIM authentication, so email providers treat it as spam or reject it. Gmail has required SPF or DKIM from every sender since February 2024. Ask your developer to send form email through an authenticated mail service and to store every submission in the dashboard as a backup.

### How often should WordPress plugins be updated?

Check for updates at least weekly and apply security updates as soon as practical, testing on a staging copy first. Patchstack reports a median of five hours from disclosure to mass exploitation for heavily targeted flaws, so monthly updates leave long gaps. Remove plugins you do not use, because an unused plugin still carries risk.

### Is WordPress outdated in 2026?

No. WordPress runs 40.2% of all websites and 58.7% of sites with a known content management system, according to W3Techs in September 2026. It is still actively developed. Individual WordPress sites can be outdated, with old themes, old PHP and abandoned plugins, and that is where most WordPress problems come from.

### Why are people moving away from WordPress?

Some teams move to hosted builders because they want someone else to handle hosting, updates and security. The trade is less control and harder migration later. Most problems that push people away, such as slow pages, fragile plugins and broken forms, come from how a site was built and maintained, and are usually cheaper to fix than to leave.

### How do I fix a WordPress site that is not working properly?

Start by listing what changed recently: plugin updates, a new theme, a host change or a new tag. Check Tools > Site Health for critical issues. Test on a staging copy, deactivating recent plugins one at a time. If the site is broken for visitors, ask your host to restore the latest working backup while the cause is found.

## Find the quiet problems. Free, in minutes.

PostCliq audits your public pages for what stops visitors becoming enquiries, with evidence and three quick wins.

Free. No credit card.

![Nirmal Gyanwali, founder and chief executive of WP Creative.](https://postcliq.com/authors/nirmal-gyanwali.jpg)

Written by

[Nirmal Gyanwali](https://postcliq.com/blog/author/nirmal-gyanwali)

Founder and CEO, WP Creative · Sydney, Australia

Nirmal Gyanwali has spent more than twenty years building websites, and most of that time watching them fail at the one job the business actually bought them for, which is turning a visitor into an enquiry. He founded WP Creative in Sydney in January 2016.

- [LinkedIn](https://www.linkedin.com/in/nirmalgyanwali/)
- [YouTube](https://www.youtube.com/@nirmalgyanwali)
- [Instagram](https://www.instagram.com/nirmalgyanwali)
- [TikTok](https://www.tiktok.com/@nirmalwpc)

## Keep reading

- [**Why is my WordPress site so slow? Causes, tests and fixes**](https://postcliq.com/blog/why-is-my-wordpress-site-slow)
- [**WordPress audit checklist for marketing teams**](https://postcliq.com/blog/wordpress-audit-checklist)
- [**Website redesign checklist: the questions to ask before you rebuild your website**](https://postcliq.com/blog/questions-before-you-rebuild-your-website)

[More on WordPress performance](https://postcliq.com/blog/topic/wordpress) · [All articles](https://postcliq.com/blog)