2. Plugins and Themes Must Be Updated

The WordPress core should not be the only thing you update. Try and update all the plugins and themes as well. To update these extensions, go to the regular WordPress update area (Dashboard → Updates). You can also go to the plugin and theme areas respectively.

3. Unused Themes and Plugins Should Be Removed

Updating themes and plugins is not the only thing you should do; you should also remove any theme and plugin that you no longer need around. Any theme and plugin that has not been updated pose a security risk, which is why it is better and safer to remove them.

With all this said, there is one exception still. Leave the newest default theme installed, even though you are not using it (e.g. Twenty Nineteen).

4. Use the Up-to-date SQL Server Version

Your database server’s software is what influences the database that WordPress uses to save your content and settings. There are two popular options, depending on the host’s configuration:

• MySQL
• MariaDB (a fork of MySQL)

To make your site performance and security (and Site Health score) better, you might want to make sure you are using the newest version. WordPress recommends using MySQL Version 5.6+ or MariaDB Version 10.1+ for a better performance.

If you are unsure on how to do this, then reach out to your host support and find out the best way to get started.

5. Make Sure Your PHP is Up to Date

PHP is the programming language that drives much of WordPress’ functionality.

Upgrading to the newest version of PHP offers high-performance improvements, as well as better security (because out-dated versions will no longer receive security updates).

Presently, WordPress advises that you use PHP 7.3+.

Many WordPress hosts will present to you an option to choose your PHP version from your dashboard or, you can report to your host support if you have any problem.