You Asked
We Answer
Most of the problems people blame on WordPress, such as hacked sites, slow pages and poor rankings, come from outdated plugins, cheap themes, weak hosting and no ongoing maintenance. Built and looked after properly, WordPress is secure, fast and flexible enough for most New Zealand businesses.
WordPress runs around 43 percent of all websites and roughly 61 per cent of the websites that use a known content management system (W3Techs, [month 2026]). That popularity is exactly why it attracts criticism: more sites means more badly built ones, and more targets for hackers.
Below we look at the five myths we hear most often from NZ businesses, and what is actually true.
WordPress is a big target because it is so widely used, but the core software is maintained by a dedicated security team and updates are released regularly. Industry reports consistently find that the large majority of WordPress vulnerabilities sit in third party plugins and themes, not in WordPress core.
In practice, a WordPress site stays secure when you:
The old advice about renaming the default admin username dates back to early versions of WordPress. Current versions ask you to choose your own username during setup, so it is worth checking, but it is no longer the main risk.
Any website can be slow, and WordPress is no exception. The usual causes are a heavy theme, too many plugins, large uncompressed images and budget shared hosting. Each of these can be fixed, and a well-built WordPress site can pass Google’s Core Web Vitals comfortably.
Google measures page experience with three Core Web Vitals: Largest Contentful Paint for loading, Interaction to Next Paint for responsiveness (it replaced First Input Delay in March 2024) and Cumulative Layout Shift for visual stability. To keep a WordPress site fast:
Page builders are not automatically bad, but they add code to every page. If you use one, test your key pages in Google PageSpeed Insights before and after launch.
Our WordPress website developers build secure, fast, and scalable WordPress sites that perform the way they should and stay that way.
WordPress is one of the most SEO friendly platforms available. It produces clean, readable URLs, lets you edit the title, meta description and headings on every page, and works with established SEO plugins such as Yoast SEO and Rank Math, which add XML sitemaps, schema markup and on page checks.
When WordPress sites struggle in search, the cause is almost always the build rather than the platform: duplicate pages created by tags and archives, slow templates, broken links after a redesign, or thin and out-of-date content. These are the same issues we find in SEO audits on every platform.
If your WordPress site is not ranking, start with a technical SEO audit, then look at content quality and internal linking before you consider changing platform.
WordPress powers far more than brochure sites. With the right hosting and development it can run:
The limit is usually hosting and architecture, not WordPress itself. High traffic sites need managed hosting, caching and a developer who plans for scale from the start.
The WordPress software is free and open source, but a professional website is not. You still pay for design, development, hosting, premium plugins, security and ongoing maintenance. Cheap builds tend to cut corners in exactly these areas, and that is where much of the bad reputation comes from.
For realistic New Zealand pricing, see our web design price guide.
For most New Zealand businesses that want full control over their content, strong SEO and room to grow, WordPress is still an excellent choice in 2026. Its reputation problem is really a build and maintenance problem. Choose an experienced developer, keep the site updated and hosted properly, and a WordPress site can serve you well for years before it needs a rebuild.
Yes, for most business websites. It is flexible, SEO friendly and supported by a huge community of developers. The key is a quality build and regular maintenance.
Yes, when core, plugins and themes are kept updated, hosting is secure and admin accounts use strong passwords and two factor authentication. Most breaches come from neglected plugins.
The usual causes are a heavy theme, too many plugins, large images and budget hosting. A speed audit will show which of these applies to your site.
Shopify suits businesses that want a hosted store with less maintenance. WordPress with WooCommerce suits businesses that want more control over content and functionality. It depends on your products, team and budget.
Check for updates at least weekly and apply security updates as soon as they are released, after a backup. A care plan takes this off your hands.
NZ Digital are a Auckland based digital marketing agency, we offer a wide range of done for you digital marketing and lead generation services. If you have more questions or would like to book a FREE Digital Marketing consult please schedule a call with us.
SEO is one of the most important long-term investments in digital marketing, but choosing the right agency can be difficult when so many promise the same results. The difference often comes down to transparency, strategy and the questions you ask before signing.
Read More
Performance Max gives businesses a way to reach customers across Google’s entire advertising network from one campaign, but its success depends heavily on strong tracking, enough conversion data and clear commercial goals.
Read More
SEO is one of the most important long-term investments in digital marketing, but choosing the right agency can be difficult when so many promise the same results. The difference often comes down to transparency, strategy and the questions you ask before signing.
Read More
