Español
Deutsch
Deactivating a plugin or theme doesn't fully remove its code from your server — it can still be exploited if a vulnerability is discovered in it later.
Why Deactivated Isn't the Same as Deleted
The files remain on your server, and in some cases can still be accessed directly even while officially inactive within the CMS.
The Cleanup Process
Periodically review your full plugin and theme list, and fully delete anything you're confident you no longer use — after confirming with a backup that nothing depends on it unexpectedly.
Fewer Moving Parts, Fewer Risks
Every piece of installed software, active or not, is potential attack surface — a leaner installation is genuinely more secure, not just tidier.
