Did you know there is more than one way to install plugins on WordPress? In
this video I walk you through all the plugin installation
methods. From the simple WordPress.org directory to advanced developer
workflows using WP-CLI and Composer.
But before we get into the methods, we also cover something that often gets
skipped: plugin security. Not every plugin is safe to install, and knowing
what a malicious plugin can actually do to your site is important.
Methods covered:
WordPress.org Plugin Directory (easiest, great for beginners)
Manual ZIP Upload (for premium or off-repo plugins)
FTP / File System (no admin access needed, great for debugging)
WP-CLI (fastest for developers, scriptable & bulk actions)
Composer (full version control across environments)
Bonus: Must-Use Plugins / mu-plugins (always-on, cannot be deactivated)
Plugin Security:
Before installing anything, make sure you know the risks. A malicious plugin
can access your database, create hidden admin accounts, steal data, mine
crypto, or turn your server into a spam machine. We go through practical rules
to keep your site safe.
0:00 Intro
0:12 Method 1: WordPress.org Plugin Directory
1:27 Plugin Security - What Can a Plugin Actually Do?
3:15 Safety Rules Before Installing Any Plugin
4:31 Method 2: Manual ZIP Upload
6:05 Method 3: FTP / File System Installation
7:18 Debugging Tip - Deactivating Plugins via File System
8:34 Method 4: WP-CLI
11:21 Method 5: Composer
12:37 Bonus: Must-Use Plugins (mu-plugins)
13:41 Outro
Tools mentioned:
WP-CLI
Composer
wp-packages.org
Know another installation method? Drop it in the comments - or suggest a
topic you want covered next!
---
Subscribe to WP103 for more WordPress tutorials, plugin reviews &
developer tips!