Before you install anything
- Take a backup or confirm your host has a recent restore point.
- Read the last changelog and WordPress version requirement.
- Check active install count and recent support replies for red flags.
- Install one plugin at a time so you know which change broke the site.
Install from the WordPress plugin directory
- Log into wp-admin as an administrator.
- Go to Plugins → Add New.
- Search for the plugin name.
- Click Install Now, then Activate.
- Open the plugin settings screen and complete onboarding.
Upload a ZIP plugin file
Premium plugins ship as ZIP files. The ZIP must contain a single folder with the plugin slug, not a nested duplicate folder. Wrong structure causes “plugin file does not exist” errors.
- Plugins → Add New → Upload Plugin.
- Choose the ZIP and click Install Now.
- Activate only after install succeeds.
Via SFTP, upload the unzipped folder to wp-content/plugins/plugin-slug/. The main PHP file header must match the folder name WordPress expects.
Install with WP-CLI (SSH)
On servers with WP-CLI and SSH access, installing from wordpress.org is one command:
bash
cd /path/to/wordpress
wp plugin install contact-form-7 --activateFor a local ZIP:
bash
wp plugin install /home/user/downloads/my-plugin.zip --activateFile permissions after manual upload
Directories should usually be 755 and files 644 on Linux hosting. Overly permissive 777 folders are a security risk. If WordPress cannot write during updates, fix ownership with your host rather than chmod 777 everything.
Post-install smoke test
- Load the homepage and one inner page in a private window.
- Submit a test form or add a product to cart on WooCommerce sites.
- Check wp-admin for new admin notices or PHP warnings.
- Open browser DevTools Console for JavaScript errors on key pages.
Disable auto-updates on payment, membership, and page builder plugins until you have staging. Shield maintenance plans include controlled updates if you prefer a developer to test first.