Why do I suddenly see a caching or security plugin installed? Print

Problem Description

One of the following plugins has been installed unexpected on your site, without your doing so:

1. WP Compress (Cache + Performance Optimization - for those with Hands-On Support)
2. W3 Total Cache
3. WP Super Cache
4. Imunify Security
5. WP Security Ninja
6. WordFence

Is this a concern?

Problem Resolution

Please note: if you see a plugin installed unexpectedly that is not in the list above, please ask us to confirm, but also assume it is malicious until you've heard back.

We try to avoid forcefully installing plugins whenever possible. However certain conditions may require it. Here are some common cases:

• As of Sept 2026 we have begun testing auto-installing the Imunify Security WordPress plugin. This surfaces the significant amount of daily attacks that our automatic server-side firewall (Imunify360) handles for you. It also now provides AI Bot crawling controls. More info on this in the announcement here.
• If we have found that you do not have a caching plugin, yet your site is utilizing resources that could easily be mitigated by using a cache, we will install one of the above caching plugins to ensure your site remains operational for all visitors rather than letting it result in repeated errors.
• If we have found that your site is using a caching plugin, but it is not caching some necessary components (example: feed pages or 404 pages), we may swap your caching plugin out for one that does effectively cache the necessary components of the site. Note that conditions may change over time. A cache may work great for years, but then a post is removed causing a 404, and suddenly an influx of traffic (humans or bots) could cause significant CPU simply from processing a 404 page. Using a caching plugin that supports 404 page caching is important to prevent this. Our guide on speeding up wordpress discusses this!