Your WordPress site could be losing rankings right now and you would not know it. A plugin update last month might have broken your canonical tags. Your images might be twice the size they need to be. Your mobile layout might have tap targets too small for Google to consider acceptable. These are not hypothetical problems — they are the exact issues we find on WordPress sites every single day.

An SEO audit is the only way to find these problems before they cost you traffic. This guide walks you through every check you need to perform, gives you the exact steps to fix what you find, and recommends tools (free and paid) that make the process faster. Whether you run a personal blog or manage a 10,000-page WooCommerce store, the fundamentals are the same.

We have audited hundreds of WordPress sites using our SEO audit tool and through manual analysis. The checklist below comes directly from patterns we see repeatedly — the issues that actually affect rankings, not theoretical best practices that make no measurable difference.

What Is an SEO Audit?

An SEO audit is a systematic review of everything that affects how search engines crawl, index, and rank your website. Think of it as a health check for your site's search visibility. You examine every layer — from server configuration and page speed down to individual title tags and internal links — looking for problems that suppress your rankings or prevent pages from appearing in search results at all.

A thorough WordPress SEO audit covers four main categories:

  • Technical SEO — Can search engines access and understand your site? This covers crawlability, indexing, HTTPS, sitemaps, canonical tags, and redirect chains.
  • Content quality — Are your pages well-structured with proper headings, unique title tags, sufficient depth, and no duplicate content?
  • Performance — Do your pages load fast enough? Google uses Core Web Vitals (LCP, CLS, and interaction responsiveness) as ranking signals.
  • Mobile usability — Since Google uses mobile-first indexing, your mobile experience directly determines your rankings, even for desktop searches.

Each category requires different tools and produces different types of findings. A redirect chain is a binary problem — it either exists or it does not. Content quality is more nuanced and requires human judgement. The checklist sections below are ordered so you can work through them systematically.

Why WordPress Sites Need Regular Audits

WordPress sites are particularly vulnerable to SEO issues because the platform changes constantly. WordPress core updates ship every few weeks. Themes update monthly. Plugins update on their own schedule. Any one of these updates can introduce problems that silently erode your search performance.

Here are the specific reasons WordPress sites need ongoing SEO audits more than static sites:

Plugin Updates Break Things

SEO plugins like Yoast or Rank Math control your title tags, meta descriptions, canonical tags, and XML sitemaps. When these plugins update, settings can reset or behave differently. We have seen Yoast updates that changed canonical tag behaviour, breaking the indexing of entire post categories. An audit catches these regressions before Google does.

Core Web Vitals Affect Rankings

Google confirmed that page experience signals — including Largest Contentful Paint (LCP), Cumulative Layout Shift (CLS), and Interaction to Next Paint (INP) — are ranking factors. WordPress themes often ship with bloated CSS and JavaScript that degrade these metrics over time as you add content and plugins. According to Google's page experience documentation, pages that meet all Core Web Vitals thresholds get a ranking boost in mobile search results.

Content Drift

Older posts become outdated. Statistics from 2024 cited in a 2026 article make you look behind the times and reduce user trust. Internal links point to pages you have since deleted. Images use old formats (JPEG instead of WebP). A content audit identifies pages that need refreshing and finds broken internal links before users hit dead ends.

Algorithm Updates

Google rolls out core algorithm updates several times per year. The March 2025 core update hit sites with thin content and poor E-E-A-T signals harder than previous updates. Regular audits help you stay ahead of these shifts by maintaining quality baselines. If your traffic drops after an update, a fresh audit shows you exactly what to fix.

WordPress-Specific Pitfalls

WordPress generates multiple versions of every page by default — category archives, tag archives, date archives, author archives, and pagination. Without proper configuration, these create massive duplicate content problems. Many themes also generate separate URLs for attachment pages (one URL per uploaded image), which Google may index as thin content.

Step-by-Step WordPress SEO Audit Checklist: Technical SEO

Start your WordPress SEO check with the technical foundation. If search engines cannot properly crawl and index your site, nothing else matters.

HTTPS Configuration

Every page should load over HTTPS with no mixed content warnings. Check for:

  • Valid SSL certificate (not expired, covers all subdomains you use)
  • HTTP-to-HTTPS redirects working (301, not 302)
  • No mixed content — all images, scripts, stylesheets, and fonts loaded over HTTPS
  • HSTS header present (Strict-Transport-Security)

How to check: Open your site in Chrome, click the padlock icon. If you see warnings, open DevTools > Console and look for mixed content errors. Fix by updating hardcoded http:// URLs in your database — use the Better Search Replace plugin to change http://yourdomain.com to https://yourdomain.com across all tables.

Robots.txt

Visit yourdomain.com/robots.txt and verify:

  • It exists and returns a 200 status code
  • It is not blocking important content (Disallow: /wp-content/uploads/ would block all your images)
  • It references your XML sitemap: Sitemap: https://yourdomain.com/sitemap.xml
  • It blocks crawl budget waste: Disallow: /wp-admin/ and Disallow: /?s= (search results)

Common WordPress mistake: Leaving "Discourage search engines from indexing this site" checked in Settings > Reading. This adds Disallow: / to robots.txt, blocking your entire site.

XML Sitemap

Your sitemap should list every page you want indexed and exclude everything you do not. Check:

  • Sitemap exists at /sitemap.xml or /sitemap_index.xml
  • All important pages are included (posts, pages, key categories)
  • No-index pages are excluded (admin, login, thin archive pages)
  • Sitemap is submitted in Google Search Console
  • No URLs return 404 or redirect — every URL in the sitemap should return 200

WordPress tip: Yoast, Rank Math, and WordPress core (since 5.5) all generate sitemaps. Make sure you are not running multiple sitemap generators simultaneously — this creates confusion for crawlers.

Canonical Tags

Every page should have a self-referencing canonical tag, and paginated, filtered, or parameterised URLs should point canonicals to the primary version. Common problems:

  • Missing canonical tags entirely
  • Canonical pointing to a different page (usually from copy-pasting page templates)
  • HTTP canonical on an HTTPS page
  • Canonical pointing to a 404 or redirected URL

How to check: View page source, search for rel="canonical". On every page, the canonical URL should match the page's own URL exactly. Use Screaming Frog to check this across your entire site in one crawl.

404 Errors and Broken Links

Check Google Search Console > Pages for URLs returning 404. Then crawl your site with Screaming Frog or our SEO audit tool to find internal links pointing to missing pages. For each broken link:

  • If the content moved, set up a 301 redirect from the old URL to the new one
  • If the content was deleted, redirect to the most relevant existing page
  • Update the internal link on the referring page to point to the correct URL

Redirect Chains

A redirect chain is when URL A redirects to URL B, which redirects to URL C. Each hop adds latency and dilutes link equity. WordPress sites accumulate these over years of URL changes. Fix by updating all redirects to point directly to the final destination URL. Check your .htaccess file or redirection plugin for chains.

Crawl Depth

Every important page should be reachable within 3 clicks from your homepage. WordPress sites with deep category hierarchies or poor internal linking often bury pages 5+ clicks deep, where Google rarely crawls them. Check crawl depth in Screaming Frog's Site Structure tab.

Content Audit

Technical SEO gets pages crawled and indexed. Content quality determines where they rank. This section of your SEO audit guide covers the on-page elements that affect rankings directly.

Title Tags

Check every page's title tag for:

  • Uniqueness — no two pages should share the same title. WordPress archive pages often duplicate the site name.
  • Length — keep under 60 characters to avoid truncation in search results
  • Keyword placement — primary keyword near the beginning of the title
  • Branding — site name at the end, separated by a pipe or dash

WordPress fix: Use your SEO plugin to set custom titles. For category and tag archives, write unique titles that describe the collection rather than using the default "Category: [name] | Site Name" format.

Meta Descriptions

Meta descriptions do not directly affect rankings, but they affect click-through rate, which does. Check:

  • Every page has a meta description (WordPress does not generate these by default — your SEO plugin handles it)
  • Length between 120 and 155 characters
  • Includes primary keyword naturally
  • Contains a compelling reason to click
  • No duplicates across pages

Heading Hierarchy

Proper heading structure helps Google understand your content's organisation. Check:

  • Every page has exactly one <h1> tag (the post title)
  • Headings follow a logical hierarchy — H2 for main sections, H3 for subsections within H2s
  • No skipped levels (H2 followed directly by H4)
  • Headings contain relevant keywords without stuffing

Common WordPress issue: Many themes use H2 or H3 tags in sidebar widgets, breaking the content hierarchy. Check your rendered HTML, not just the post editor.

Thin Content

Pages with very little unique content struggle to rank. Identify pages under 300 words and either:

  • Expand them with useful, relevant content
  • Consolidate them with related pages (301 redirect the thin page to the expanded one)
  • Set them to noindex if they serve a functional purpose but have no search value (like tag archives with 2 posts)

Duplicate Content

WordPress generates duplicate content through archives, pagination, URL parameters (like ?utm_source=), and HTTP vs HTTPS variations. Use canonical tags and noindex directives to tell Google which version to index. Screaming Frog's "Exact Duplicates" report catches pages with identical body content.

Performance Audit: Core Web Vitals

Google uses three Core Web Vitals metrics as ranking signals. Failing these means your content needs to be significantly better than competitors to rank at the same position. Run your pages through PageSpeed Insights to get scores based on real user data (CrUX) and lab simulations (Lighthouse).

Largest Contentful Paint (LCP)

LCP measures how long it takes for the largest visible element (usually a hero image or heading) to render. Target: under 2.5 seconds.

Common WordPress fixes:

  • Serve images in WebP or AVIF format (use ShortPixel or Imagify plugins)
  • Add width and height attributes to images so the browser reserves space
  • Preload your LCP image: <link rel="preload" as="image" href="hero.webp">
  • Use a CDN (Cloudflare free tier is sufficient for most sites)
  • Reduce server response time — switch from shared hosting to managed WordPress hosting if TTFB exceeds 600ms

Cumulative Layout Shift (CLS)

CLS measures visual stability — how much the page layout shifts during loading. Target: under 0.1.

Common WordPress fixes:

  • Set explicit dimensions on all images and iframes
  • Reserve space for ads and embeds before they load
  • Avoid injecting content above existing content after page load
  • Use font-display: swap with web fonts and preload critical font files

Total Blocking Time (TBT) / Interaction to Next Paint (INP)

TBT measures how long the main thread is blocked by long JavaScript tasks. INP measures responsiveness to user interactions. Both reflect how "janky" your site feels.

Common WordPress fixes:

  • Defer non-critical JavaScript: add defer attribute to script tags
  • Remove unused plugins — each active plugin adds JavaScript and CSS. Audit your plugin list and deactivate anything you do not actively use
  • Minify and combine CSS/JS files (use WP Rocket, Autoptimize, or LiteSpeed Cache)
  • Lazy-load images below the fold using native loading="lazy" attribute

Mobile Audit

Google uses mobile-first indexing, meaning it crawls and ranks your site based on the mobile version. If your mobile experience is broken, your desktop rankings suffer too.

Viewport Configuration

Verify your theme includes the viewport meta tag: <meta name="viewport" content="width=device-width, initial-scale=1">. Without this, mobile browsers render your page at desktop width and scale it down, making text unreadable.

Tap Targets

Buttons and links must be at least 48x48 CSS pixels with adequate spacing between them. WordPress themes with tightly packed navigation menus or small footer links frequently fail this check. Test in Chrome DevTools mobile emulation or run Lighthouse's accessibility audit.

Font Size

Body text should be at least 16px on mobile. Smaller text forces users to pinch-zoom, which Google considers a poor experience. Check your theme's responsive CSS — many themes reduce font size on mobile when they should maintain or increase it.

Content Parity

Everything on your desktop site should be accessible on mobile. Some themes hide content on mobile using display: none — Google still sees this content is hidden and may treat it as less important. Accordions and tabs are acceptable as long as the content is in the DOM and accessible to crawlers.

Security Checks

Security issues directly impact SEO. Google flags hacked sites with a "This site may be hacked" warning in search results, and browsers block pages with mixed content warnings.

Mixed Content

After migrating to HTTPS, any resources still loaded over HTTP create mixed content. Browsers may block these resources, breaking functionality or layout. Check the browser console for mixed content warnings and update all resource URLs to HTTPS.

Vulnerable JavaScript Libraries

Outdated jQuery versions and other JavaScript libraries with known vulnerabilities can be exploited and get your site flagged. Lighthouse reports known vulnerable libraries in its security audit. Update to current versions or replace with modern alternatives.

WordPress-Specific Security

  • Keep WordPress core, themes, and plugins updated
  • Remove inactive themes and plugins (they are still attack vectors even when deactivated)
  • Disable XML-RPC if you do not need it (add_filter('xmlrpc_enabled', '__return_false');)
  • Check for the X-Content-Type-Options: nosniff and X-Frame-Options headers

Schema Markup Validation

Schema markup (structured data) helps Google understand your content type and can earn rich snippets in search results — star ratings, FAQ dropdowns, how-to steps, and more. These rich results dramatically increase click-through rates.

What to Check

  • Every blog post should have Article or BlogPosting schema
  • Product pages need Product schema with price, availability, and reviews
  • FAQ content should use FAQPage schema
  • Local businesses need LocalBusiness schema
  • Check for errors in Google's Rich Results Test

WordPress Implementation

Yoast and Rank Math both generate basic schema automatically. For custom schema, use a plugin like Schema Pro or add JSON-LD directly to your theme's header.php. Validate every page type with the Rich Results Test — automated schema from plugins often has errors or missing required fields.

Free SEO Audit Tools for WordPress

You do not need expensive software to run a solid WordPress SEO audit. These free tools cover every category in the checklist above.

1. Google Search Console

The single most important free tool. Shows which pages are indexed, which have errors, your search queries and positions, Core Web Vitals from real users, and manual actions. If you only use one tool, use this one. Set it up at search.google.com/search-console.

2. Google PageSpeed Insights

Combines real user data from the Chrome User Experience Report (CrUX) with Lighthouse lab analysis. Enter any URL and get specific, actionable recommendations for improving load speed. Free and unlimited at pagespeed.web.dev.

3. Screaming Frog SEO Spider (Free Version)

Crawls up to 500 URLs for free, checking every technical SEO factor — titles, meta descriptions, headings, canonicals, redirects, broken links, and more. The free version covers most WordPress sites. Download from screamingfrog.co.uk.

4. Chrome Lighthouse

Built into Chrome DevTools (F12 > Lighthouse tab). Runs performance, accessibility, best practices, and SEO audits on any page. Use it for quick checks on individual pages. The SEO audit catches missing meta tags, robots issues, and mobile problems.

5. Ahrefs Webmaster Tools

Free for site owners (verify ownership like Search Console). Crawls your site and reports SEO issues categorised by severity. Also shows your backlink profile and which keywords you rank for. More detail at ahrefs.com/webmaster-tools.

6. WordPress AI Plugin SEO Audit

Our SEO audit tool runs technical, content, performance, and mobile checks in one scan. It checks Core Web Vitals, heading hierarchy, meta tags, schema markup, security headers, and generates a prioritised fix list. Try it free for 14 days — no credit card required.

How Often Should You Audit?

The right audit frequency depends on how actively you manage your site:

Site Type Full Audit Quick Checks
Active blog (4+ posts/month) Monthly Weekly
WooCommerce / ecommerce Monthly Weekly
Business site (rarely updated) Quarterly Monthly
After major update (core/theme/plugin) Immediately N/A

Weekly quick checks should cover: Search Console for new errors, Core Web Vitals status, and indexing coverage. These take 10 minutes and catch problems before they compound.

Monthly full audits should run through the complete checklist above. Use a crawler to check the entire site, review content performance in analytics, and verify that previous fixes are still in place.

Set a calendar reminder. The sites that rank best are the ones that treat SEO as ongoing maintenance, not a one-time project.

Common WordPress SEO Issues and How to Fix Them

After running hundreds of SEO audits for WordPress websites, these are the issues we find most frequently — along with specific fixes.

1. Missing or Duplicate Title Tags

Impact: High. Title tags are the strongest on-page ranking signal.

Fix: Install Yoast or Rank Math if you have not already. Go to each page and write a unique title under 60 characters with your target keyword near the front. For bulk fixes, use Screaming Frog to export all titles to a spreadsheet, identify duplicates, and work through them systematically.

2. Unoptimised Images

Impact: High. Images are usually the largest files on a page and the primary cause of slow LCP.

Fix: Install ShortPixel or Imagify to automatically convert images to WebP. Add width and height attributes to prevent layout shift. Use loading="lazy" for images below the fold. For the LCP image (usually the hero), add a preload hint in your theme's <head>.

3. No XML Sitemap in Search Console

Impact: Medium-high. Without a submitted sitemap, Google relies on crawling links to discover your pages, which is slower and less reliable.

Fix: Generate a sitemap with your SEO plugin (Yoast: SEO > General > Features; Rank Math: Sitemap Settings). Submit it in Search Console > Sitemaps. Verify it includes all important pages and excludes noindex pages.

4. Broken Internal Links

Impact: Medium. Broken links waste crawl budget and create dead ends for users.

Fix: Crawl your site with Screaming Frog or our audit tool and filter for 404 responses. For each broken link, either update the link to the correct URL or set up a 301 redirect. The Redirection plugin for WordPress makes managing redirects straightforward.

5. Render-Blocking JavaScript and CSS

Impact: Medium. Render-blocking resources delay page rendering and hurt LCP and TBT scores.

Fix: Add defer or async attributes to non-critical scripts. Use a caching plugin like WP Rocket that handles this automatically. Inline critical CSS and defer the rest. Remove jQuery dependency where possible — many modern themes no longer need it.

6. Missing Schema Markup

Impact: Medium. Without schema, you miss out on rich snippets that increase click-through rates by 20-30% according to research from Moz.

Fix: Enable schema in your SEO plugin settings. For blog posts, ensure Article schema includes author, datePublished, and image. For product pages, add Product schema with price and availability. Test every page type in the Rich Results Test.

Frequently Asked Questions

How do I do an SEO audit on my WordPress site?

Start with Google Search Console to check indexing errors and crawl issues. Then run PageSpeed Insights for Core Web Vitals. Use a crawler like Screaming Frog or our SEO audit tool to check every page for missing titles, broken links, duplicate content, and redirect chains. Finish with a mobile usability check and schema validation.

How often should I audit my WordPress site for SEO?

Run a full audit monthly if you publish content regularly or make site changes. Do weekly quick checks on Core Web Vitals and indexing status in Search Console. After major updates (WordPress core, theme, or plugin updates), run an immediate audit to catch anything that broke.

What is the best free SEO audit tool for WordPress?

Google Search Console is the best free tool for indexing and search performance data. Google Lighthouse (built into Chrome DevTools) covers performance and accessibility. Screaming Frog is free for up to 500 URLs. For a combined audit covering technical SEO, content, and performance in one report, WordPress AI Plugin offers a 14-day free trial.

Can SEO plugins like Yoast replace a proper SEO audit?

No. Yoast and Rank Math help with on-page basics like title tags and meta descriptions, but they cannot detect site-wide issues like redirect chains, orphan pages, Core Web Vitals failures, broken internal links, or duplicate content across pages. A proper audit examines your entire site as a search engine sees it.

What are the most common WordPress SEO issues?

The top issues are: missing or duplicate title tags, no XML sitemap submitted to Search Console, slow page load times from unoptimised images and render-blocking resources, broken internal links after URL changes, mixed HTTP/HTTPS content, missing canonical tags causing duplicate content, and poor mobile usability from non-responsive themes.

Related Reading

Audit Your WordPress Site in Minutes

Technical SEO, Core Web Vitals, content quality, mobile — one scan covers everything. 14-day free trial, no credit card.

Start Your Free Trial