Your plugins — quick review
📨 Contact Form 7
- Still boring
- Still reliable
- Works well with CFDB7
🐝 CF7 Apps Honeypot
- Lightweight spam protection
- No CAPTCHA annoyance
- Good choice
🗄 Contact Form CFDB7 (post backup)
- Saves submissions in DB
- Great safety net if mail fails
- Just remember: GDPR = data retention policy
🍪 CookieYes | GDPR Cookie Consent
- Proper consent banner
- Blocks scripts correctly
- Fine for EU (you did the right thing)
🔐 NinjaFirewall (WP Edition)
- Very strong security layer
- Especially good if this site gets attention
- Don’t enable every rule blindly (some break REST / AJAX)
🕵️ NinjaScanner
- Good for integrity checks
- Run manually, not constantly
👤 Ultimate Member
- Heavy, but powerful
- Fine since you know what you’re doing
- Avoid overlapping features with Woo later
🛒 WooCommerce +germanized
- Big, but unavoidable if you need commerce
- Leave it idle until you need it
✉️ WP Mail SMTP
- Mandatory in 2026
- Prevents 90% of “contact form doesn’t send” headaches
NinjaFirewall + REST / AJAX
When your chat / API stuff starts:
- whitelist:
/wp-json/- admin-ajax.php
- otherwise things will randomly fail