Popular plugins slow down your server – and delay TTFB.

WordPress Mobile Speed


There are no affiliate links on PagePipe.

A site is in serious trouble. Seventeen of 33 plugins have package sizes above 100k compressed (gzip). The site’s pages slowly load in 29 to 47 seconds. All pages are dragging beyond belief.

Time To First Byte (TTFB) is a measurement of server delay. We call it server speed overhead. We subtract it from our performance budget. The budget is 2 seconds. Sadly, the TTFB for this site varies from 2 to 6 seconds. Do we have to change hosts?

Is this site bad?

Rotten! Horrific! One of the worst we’ve repaired. The client is on GoDaddy hosting. We use GoDaddy hosting. It’s never that bad. We ask GoDaddy to check the server. They say it’s fine and dandy. There are no other domains on the server. They claim junk code in the server htaccess file is slowing everything down. We check using:

HTaccess Editor

What we should see 10 lines of code in the HTaccess file contents. That’s the standard WordPress code (below).

Instead, we see 23,376 extra lines of code.

Where is this garbage coming from?

We clean out HTaccess. Then iThemes Security plugin puts all that junk right back instantly.

iThemes Security plugin is writing to the HTaccess file as if it were a wastebasket. Incredible confusion. Is it the plugins fault? Unlikely. It’s a slow and fat plugin but it isn’t that ugly. We guess an “operator error.”

Someone made settings for this plugin on overload. Why? Paranoia from being hacked and fear of getting hacked again with malware. A knee jerk overreaction into the red zone. Amazing security! We’ve written about this nasty speed-hog plugin before:

REFERENCE: https://pagepipe.com/free-discrete-plugins-replace-bloated-security-plugins/

We run some tests ascertaining what other plugins slow things down on this errant site. But first let’s look at each plugin’s download size.

Plugin Namezip file kpercent
iThemes Security Pro330015.21%
WP Rocket240011.06%
All In One SEO Pack15006.91%
Better WordPress Google XML Sitemaps15006.91%
Really Simple SSL5292.44%
Popups – WordPress Popup4382.02%
Sucuri Security3771.74%
Lazy Load by WP Rocket3411.57%
Polls CP2361.09%
Swift Mailer2301.06%
Custom Permalinks1930.89%
Contact Form 71830.84%
WPFront Notification Bar1780.82%
iThemes Sync1570.72%
Post Expirator970.45%
Akismet Anti-Spam740.34%
Display Widgets460.21%
Velvet Blues Update URLs280.13%
Simple 301 Redirects – Bulk Uploader260.12%
Classic Editor190.09%
Contact Form CFDB7150.07%
ETH Redirect to Latest Post110.05%
Simple Banner100.05%
Insert Headers and Footers90.04%
Honeypot for Contact Form 780.04%
Simple 301 Redirects50.02%
No Category Base (WPML)40.02%
Postman SMTP20.01%
Total zip package file size21696

How much do popular plugins damage your site speed? We can guess by looking at their download zip folder size. Notice most of these below are huge megabyte zip file sizes.

There is a direct correlation between plugin popularity and slowness. The more popular the slower it is. They’re the bigger resource hogs on the server. They destroy good TTFB.


NAME active installationszip file wt
Contact Form 75+ million181k
Yoast SEO5+ million3.1 MB
Akismet5+ million72.7 KB
WooCommerce5+ million7.2 MB
Jetpack5+ million7.6 MB
Elementor4+ million4.8 MB
Wordfence Security3+ million4.5 MB
Contact Form by WPForms3+ million4.3 MB
MonsterInsights Google Analytics Dashboard2+ million2.3 MB
UpdraftPlus2+ million6.6 MB
All in One SEO Pack2+ million1.2 MB

What are the load times of the plugins used on this site under test:

Theme Enfold Child770.70
WP core549.30
WP Rocket124.0013.19%56.41%
iThemes Security Pro98.5010.48%53.69%
All In One Seo Pack81.608.68%62.37%
Contact Form 779.908.50%70.88%
Sucuri Scanner26.402.81%77.07%
Postman SMTP26.302.80%79.87%
Custom Permalinks24.602.62%85.12%
Bwp Google Xml Sitemaps19.502.07%87.20%
Popups WordPress Popup17.501.86%90.92%
Lazy Load by WP Rocket15.701.67%92.59%
Really Simple Ssl15.201.62%94.21%
Ithemes Sync11.301.20%95.41%
Simple Banner8.700.93%96.34%
WPFront Notification Bar8.600.92%97.25%
Akismet Anti-Spam6.700.71%97.97%
Polls CP6.200.66%98.63%
Post Expirator6.100.65%99.28%
Velvet Blues Update URLs3.600.38%100.13%
Contact Form Cfdb73.400.36%100.49%
Classic Editor2.000.21%100.70%
Insert Headers And Footers1.900.20%100.90%
Eth Redirect To Latest Post1.700.18%101.09%
Display Widgets1.400.15%101.23%
Simple 301 Redirects1.300.14%101.37%
Swift Mailer0.900.10%101.47%
Simple 301 Redirects Addon Bulk Uploader0.700.07%101.54%
No Category Base (WPML)0.400.04%101.59%
Contact Form 7 Honeypot0.300.03%101.62%
grand total theoretical site drag2259.80

Notice that Enfold theme load time is nasty: 770 milliseconds. We’ve only seen one theme worse. Divi’s one second load time!

You can test TTFB with WebPagetest.org or ByteCheck.com

Many popular plugins often do calculations and file data on the server. These delays don’t show up in a speed test waterfall. Find out how fat plugins affect your site by checking server resource usage in server Cpanel. But one sure indicator is time to first byte gets unacceptable. A good TTFB is around 200 to 300 milliseconds. Average TTFB is 500 milliseconds. And bad news is anything over a second. This site is 6 seconds!

So what’s the alternative?

Use fast-loading discrete plugins instead. These are free single-purpose plugins that usually have no settings. They load in around 1 millisecond and the zip folder size is definitely under 100k – more like 10k. You only install the features you need. One plugin per feature. You don’t throw in the kitchen sink with over-engineering and gold plating.

But isn’t using many plugins worse than using one plugin? No. You could load 250 one-millisecond discrete plugins instead of Yoast SEO plugin. Think about it. You don’t need but a few lightweight plugins to duplicate the fat plugins features.

For example, the AMP plugin mentioned above doesn’t help mobile speed. Instead it slows down the page by 400 milliseconds because it’s so complicated. We suspect it also loads down the server. We don’t need to replace or substitute this plugin, we need to remove it. That’s right. Get rid of that Google-Dog plugin. It’s not helping anything.

REFERENCE: https://pagepipe.com/why-google-amp-is-not-the-ultimate-solution-for-mobile-wordpress-speed/

We get busy removing the bad plugins and replacing them with discrete plugins. We trash the following plugins:

  • AMP
  • WP Rocket
  • Sucuri Scanner
  • Akismet
  • Lazy Load by WP Rocket
  • Optimus

What happens to speed?

Global page loads drop from 38.7 seconds average to 5.7 seconds.

We next pull the iThemes Security plugin and replace it with 4 discrete plugins.

Speed gets even better:

3.5 seconds average. 10 times faster page loads.

Can we make the pages load in under 2 seconds? Yes. But we need to remove the SEO plugin – and replace the theme and pagebuilder. That costs too much time, energy, and money for this client. So we postpone these recommendations until a future rebuild.

We now understand how popular plugins slowdown TTFB (server overhead). Hurrah! You won’t need to move from your hosting provider after all.

Some managed hosts blacklist plugins to prevent the installation of vulnerable and disruptive plugins. Disruptive means server resource hogs. These include WordPress Popular Posts, Broken Link Checker, and Google Sitemap Generator.

You may ask, “How do we reduce server activity during backup when the media library is super big?”

Good question because that can slow down TTFB, also.

We use three free plugins to reduce a server’s burden during backups:

We set site automatic backups to happen every week. We know if we lost one weeks worth of activity it wouldn’t damage us too much. Sad? Yes. But not ruined. That one-week interval reduces the amount of time the plugin is hitting on the server. (6.6M zip folder download).

UpDraftPlus takes into account server throttling and potential shutdowns. It doesn’t cause overruns of server resources. It sends packages in segments and waits for the server to recognize it’s not under attack or overload. Then it sends the next backup package (zip folders).

Set the weekly start time to a day when you know you have the least site traffic. On smaller sites, with few changes, we update monthly. Do you really need daily updates?

We retain two backup copies on remote cloud services (free Dropbox). But quarterly, we download a backup to our computer desktop for archiving. Don’t save backups to the same server you host on except for disposable copies. Be safe.

2Exclude Image Thumbnails From UpdraftPlus Backups
This small 1.6k plugin excludes WordPress generated image thumbnails from Updraft backups, saving space. The original, full-sized image is included in backups. If a restoration from backup is needed, a thumbnails plugin is used to regenerate thumbnails using the original, full-size images. The plugin works for all image formats. It includes both native and custom image sizes added by themes and plugins.

There are 4 WordPress default image sizes normally created by core: original, large, medium, and thumbnail. Every time an image is uploaded these are placed on the server. Server space is not an issue. Resource consumption during backup and restore is a potential problem. We’ve seen themes (like Enfold) automatically create up to 18 different thumbnail sizes whether they’re used on pages or not. This bloats the media library backup.

3Regenerate Thumbnails
Regenerate the thumbnails for your image uploads. Useful when changing their sizes or your theme. Regenerate all thumbnail sizes for one or more images uploaded to your Media Library. We keep it disabled and use it only when needed. (79.2k zip download).



Steve Teare
performance engineer


Other unconventional speed articles like this one:

Instead of band-aid approaches, we drill down to the root cause of your slow site. This is origin optimization. Also known as site tuning. To do this, we analyze site components:

  • Hosting
  • Theme
  • Plugins
  • Scripts and third-party services.
  • Images and media library.
  • We minimize globally loading plugin effects.

Find out more details about Site TuningGet Speed!


Other Related Resources

Build with Empathy