WordPress Plugin Settings That Get Forgotten

WordPress plugin settings get configured once when the plugin is installed. The settings reflect the site's state at that moment. Over time, the site evolves but the settings don't. The drift between current needs and original settings produces specific issues.

A periodic review of plugin settings catches the drift. The pattern produces better-configured sites without requiring constant attention.

The categories of forgotten settings

Cache exclusions configured for plugins that no longer exist. The cache plugin has exclusion rules for a forms plugin that was removed two years ago. The rules are inert but clutter the configuration.

Email recipient lists that haven't been updated. The form plugin sends to john@company.com, but John left the company eighteen months ago. New submissions go nowhere useful.

API keys from services no longer used. The plugin has Mailchimp credentials from when the site used Mailchimp; the site now uses ConvertKit. The credentials are obsolete.

Backup destinations that aren't accessible. The backup goes to Dropbox account credentials that expired. Backups are configured but not actually saving anywhere useful.

Integration toggles that don't match current integrations. Social sharing buttons for platforms the site no longer cares about.

The annual settings audit

Once a year, walk through each significant plugin's settings:

1. Open the plugin's settings page.

2. Read through every section.

3. For each setting, ask: does this still match current needs?

4. Note settings that are outdated.

5. Update or remove as appropriate.

The audit takes a few hours for a typical site. The findings often surprise even careful operators.

The triggers for targeted review

Beyond annual audits, specific events should trigger settings review for affected plugins:

Service changes. Switching from Mailchimp to ConvertKit means reviewing every plugin that integrates with email marketing.

Personnel changes. Staff leaving means reviewing every plugin that has their email as a recipient.

Domain changes. Settings with the old domain need updating.

Major plugin updates. Update changelogs sometimes describe new settings that the existing configuration doesn't take advantage of.

The email recipient audit

Form plugins, comment notifications, security alerts, error reporting all send emails. The recipients accumulate over years.

The pattern that works: every plugin that sends email has a documented recipient list. The list is reviewed when staff changes.

For each plugin: check the notification email field. Is the recipient still valid? Should it be a role-based address (forms@company.com) rather than a personal one?

Role-based addresses survive personnel changes. Personal addresses don't.

The API integration audit

Plugins that integrate with external services accumulate credentials. The audit:

For each plugin with API credentials: is the integration still in use? If not, remove the credentials and disable the integration.

For active integrations: are the credentials current? Some services rotate keys; expired credentials may not produce visible errors immediately.

For credentials that are accumulated but unused: remove them. Plugins with unused integration credentials have unnecessary surface area.

The SEO plugin settings

SEO plugins have many settings that benefit from periodic review:

The Organization or Person schema settings. Are they current?

The default Open Graph image. Is it current?

The robots.txt rules. Are they still appropriate?

The redirect rules. Are old redirects still needed?

The sitemap settings. Are the included content types still correct?

SEO plugin settings affect many pages; outdated settings affect SEO consistently.

The security plugin settings

Security plugins have settings that benefit from review:

The IP allowlist or blocklist. Are the entries current?

The login attempt thresholds. Are they appropriate for current traffic?

The email recipients for security alerts. Are they correct?

The scan schedules. Are they running at appropriate frequencies?

The settings that worked when the site was smaller may not fit when the site has grown.

The honest framing

Plugin settings drift is normal but invisible. Sites operate with outdated settings indefinitely if nobody reviews them.

The annual review is small effort with real findings. The findings often include specific issues that have been quietly causing problems.

For sites that have never audited plugin settings, the first audit usually reveals more drift than expected. The discipline of annual review prevents accumulation in the future.