# WordPress care plan: maintenance with security built in, not bolted on.

> WordPress maintenance plan: a monthly WP-CLI checklist, abandoned plugins, PHP version and Elementor or WPML licenses, security included. €35/month.

URL: https://webintacta.com/en/wordpress-maintenance
Language: English (Spanish version: see the hreflang alternate of the HTML page)
Last updated: 2026-10-24

**In short:** WebIntacta's WordPress maintenance plan costs €35/month for a business website and €69/month for a WooCommerce store, excluding VAT, with no long-term contract. It includes updates with a backup first, a daily off-server backup, a weekly security scan, downtime alerts, a monthly report and the cleanup if the site gets infected (from your third month on the plan). I do it myself, Jose Soriano, remotely for small businesses worldwide.


A maintenance service that only clicks "Update" isn't enough: someone has to back up first, check that nothing broke afterwards and watch that nobody has touched the files. And if something goes wrong, the cleanup shouldn't be a new invoice. (If you were looking for WordPress "maintenance mode", the "back soon" notice, this isn't it: this is the service of looking after your site.)

## What I check in a WordPress site every month

- Core and plugins compared with the originals (`wp core verify-checksums`)
- Plugins with a pending update, closed on WordPress.org or not tested with the latest releases
- The hosting's PHP version compared with the one WordPress recommends
- Licenses for Elementor Pro, WPML and other premium plugins: without an active license they don't update
- Administrators, `wp-config.php` (debugging, file editor) and .php files in `uploads`
- WooCommerce: version, outdated theme templates and a test purchase (Online store plan)

## How I do it

1. **Inventory with WP-CLI.** I install the connector, list the plugins, theme, licenses and PHP version, and check the integrity of the core before touching anything.
2. **Updates in the right order.** Backup first, then whatever has published vulnerabilities, then the rest; when I'm done I check forms, cart and page builder.
3. **Month after month.** The checklist below every month, a daily backup, a weekly scan and the monthly PDF report.

## Monthly WordPress maintenance checklist

This is what I do every month on a WordPress site, with the WP-CLI commands for anyone who wants to do it themselves. Always with a backup first:

1. **Integrity of the core and of the plugins from the directory:** `wp core verify-checksums` and `wp plugin verify-checksums --all`. Any file that doesn't match the original gets reviewed before updating.
2. **What's pending:** `wp core check-update` and `wp plugin list --update=available`. Plugins with published vulnerabilities first; major version jumps one at a time.
3. **Administrators:** `wp user list --role=administrator`. Every account has to have an owner.
4. **Scheduled tasks:** `wp cron event list`. A task with a name that doesn't match any plugin is a classic sign of reinfection.
5. **Checks after updating:** home page, contact forms, cart and checkout if there's a store, and the editor (Elementor or the block editor).

## Abandoned plugins

WordPress.org shows a warning when a plugin hasn't been tested with the last three major WordPress releases, and it closes plugins with an unfixed vulnerability or whose author abandons them. A closed plugin gets no more patches: if you can't do without it, I suggest a maintained alternative and swap it with a backup first. Fewer plugins, fewer doors. If you want to check it yourself, the steps are in [vulnerable WordPress plugins](https://webintacta.com/en/guides/vulnerable-wordpress-plugins).

## PHP version

WordPress recommends PHP 8.3 or later and warns that older versions no longer get security patches. Many hosts leave the site on the version it was installed with. Before moving up I check that the theme and plugins are compatible, on a copy if the site is large.

## Elementor, WPML and premium licenses

Premium plugins (Elementor Pro, WPML, ACF Pro, WooCommerce extensions) update from their author's servers, and only with an active license. If the license has expired, the plugin stays on the version it had, flaws included. I use your licenses; if one has expired, I let you know before it becomes a problem. A "nulled" copy of a premium plugin can't be maintained: it's a very common source of infections and has to be replaced.

The two plans, their prices and what each one includes, side by side, are on the [website maintenance](https://webintacta.com/en/website-maintenance) page. Why maintenance costs what it costs, in [how much website maintenance costs](https://webintacta.com/en/guides/website-maintenance-cost).

## WordPress maintenance service: what to ask for

- That they back up **before** every update and keep the backup off your server
- That they tell you in writing, every month, what was updated and what wasn't
- That they watch security, not just uptime: file integrity and malware scans
- That it's clear what happens if you get hacked: is the cleanup included or is it another invoice?
- That there's no long-term contract and the site, the backups and the logins stay yours

If your site isn't WordPress or you run several platforms, see the general [website maintenance](https://webintacta.com/en/website-maintenance) page. If the WordPress site is already infected, the first step is [hacked WordPress cleanup](https://webintacta.com/en/wordpress-malware-removal).

## Price

No long-term contract. Paying yearly, you pay 10 months. The Priority add-on can be added to either plan.

### Maintenance · Business website — €35/month (excluding VAT)
WordPress or company website: kept up to date, backed up and monitored.

$29/month outside the EU.
- Supervised updates of core, plugins and theme, with a backup first
- Daily backup stored off your server
- Weekly security scan
- Downtime alert (checked every 5 minutes)
- Monthly PDF report
- One cleanup a year included if it gets infected (from the 3rd month)

> No minimum term. Annual payment: 10 months.

**+ Priority add-on: +€25/month** (+$19/month outside the EU). Your issues go to the front of the work queue and, if you get hacked, the cleanup gets priority at no extra cost.

### Maintenance · Online store — €69/month (excluding VAT)
PrestaShop or WooCommerce: everything in the business website plan, plus checkout monitoring.

$59/month outside the EU.
- Everything in the Business website plan
- Daily scan and file integrity monitoring with the connector
- Module review before updating (on a staging copy when possible)
- Monthly test purchase
- 1 hour of technical work a month
- Cleanup included if it gets infected (from the 3rd month)

> No minimum term. Annual payment: 10 months.

**+ Priority add-on: +€25/month** (+$19/month outside the EU). Your issues go to the front of the work queue and, if you get hacked, the cleanup gets priority at no extra cost.

Outside the EU, WordPress maintenance is $29/month for a website or $59/month for a store, fully remote.

## Frequently asked questions

### How much does WordPress maintenance cost?

€35/month for a business website and €69/month for a WooCommerce store. The Priority add-on, which puts your issues ahead of other work, is +€25/month on top. excluding VAT. Outside the EU, $29/month and $59/month.

### Is this the same as WordPress maintenance mode?

No. "Maintenance mode" is the temporary page WordPress shows while it updates. This is a monthly service: someone who updates, backs up and watches the security of your site.

### Is there a minimum term?

No. You cancel whenever you like and billing stops the following month. The only condition is that the included cleanup kicks in from your third month on the plan.

### Does it include content or design changes?

The Business website plan doesn't include hours of work; the Online store plan includes one hour a month. Bigger changes are quoted separately.

### What if an update breaks something?

That's why I back up before every update: we roll back and I look for the cause before trying again.

### Do you guarantee a response time?

I don't promise response times: I'm one person, not a support center. I answer tickets and chat as soon as I can, in order, and with the priority add-on your case goes to the front of the queue.

Hire or ask (email and chat): https://webintacta.com/soporte?lang=en