Since WordPress 5.5, every site open to search engines publishes an XML sitemap at /wp-sitemap.xml, with no plugin at all. Since version 5.7, it also prints a robots meta tag, and for much longer a canonical tag on posts. Yet in 2026, WordPress still cannot produce a meta description.
That is where an SEO plugin starts earning its place. You still need to know what it really adds, beyond the green lights and scores out of 100, which rest on no Google data: third-party tools, Google reminds site owners, have no access to its ranking data.
On August 26, 2026, one of these plugins, installed on more than four million sites, shipped about a dozen security fixes and a feature that created administrator access for its vendor in the same update. We will come back to it in detail: the episode says a lot about what to check before installing an SEO plugin.
This comparison therefore judges ten tools on what they actually put in your pages, on how seriously they are run, and on their real price, renewals included.
What WordPress already does without an SEO plugin
Many sites install an SEO plugin by reflex, without knowing what core already handles. Starting there avoids paying for native features and helps you understand conflicts.
What core outputs
The native XML sitemap covers public post types, taxonomies, author archives and the homepage, with up to 2,000 URLs per file. Since WordPress 6.5, it includes the last modified date of posts and of the homepage.
The Robots API, added in version 5.7, sets a noindex directive when the “Discourage search engines from indexing this site” option is checked, as well as on internal search results pages. By default it allows large image previews. Core also prints the <title> tag if the theme declares support for it, and a canonical URL on single content views.
Finally, WordPress redirects an old post URL to the new one on its own when you change a slug. It helps, but it does not cover pages and has no interface.
What it leaves to plugins
Core produces no meta description, no Open Graph tags for social networks, no JSON-LD structured data and no redirect manager. Since WordPress 7.0, it offers a Breadcrumbs block for block themes, but without structured markup: the trail is visual only, and only a plugin describes it to Google.
Core also offers no per-page settings: you cannot set a specific page to noindex or define a custom canonical without a plugin or code. That is exactly what the ten tools below provide, each in its own way.
What Google actually reads in 2026
An SEO plugin is only worth what Google uses. Google Search Central’s documentation has changed a lot over the past two years, and some of the features vendors promote no longer do anything.
Titles and meta descriptions
Google builds its snippets primarily from the page content, and only sometimes uses the meta description, when it describes the page better. It still helps steer the click, but nothing indicates it affects ranking. Meta keywords are not used at all.
For the title, Google draws on the <title> tag, the visible title, headings and other signals, and may rewrite it. A good title template in your plugin matters more than a keyword score.
Structured data: a shrinking list
Structured data makes a page eligible for a rich result, never guaranteed. And the list of rich results keeps getting shorter. FAQ rich results disappeared from Google starting May 7, 2026, after HowTo in 2023 and several other types retired since June 2025 (estimated salary, vehicle listings, fact checks).
Breadcrumbs have only appeared on desktop since January 2025. AIOSEO and SureRank still promise FAQ rich snippets. The markup does no harm, but it no longer delivers the promised effect.
Sitemaps: the date matters, the ping is gone
Google ignores the priority and changefreq fields in sitemaps. It uses the last modified date only if it is consistently accurate. As for the “ping” that told Google about each new post, its endpoint was retired after an announcement in June 2023: a plugin that still promises to “notify Google” no longer does anything useful.
llms.txt and “GEO”: what Google says
Half of the plugins on this list (Yoast, Rank Math, AIOSEO, SEOPress and Squirrly) now generate an llms.txt file, meant to help AI systems. Google stated in June 2026 that these files are not needed for Google Search and have no effect, positive or negative, on visibility. WordPress’s own AI features are explained in our article on WordPress, the Abilities API and the MCP Adapter.
Likewise, Google’s Indexing API, which three plugins on the list offer (SEOPress, Squirrly and, through an extension, Schema & Structured Data), is officially only for job postings and livestream pages. Misuse can lead to access being revoked.
How we ranked them
We looked at six criteria. First, what the free version outputs: titles, descriptions, canonicals, sitemap, structured data, breadcrumbs. Next, redirects and 404 tracking, free with some plugins and paid with others.
Then come the quality of structured data and the risk of duplicates, followed by maintenance pace and compatibility with WordPress 7.1. The fifth criterion is security culture: vulnerability history and how clearly changelogs report fixes. The last is the real price, separating first-year pricing from renewals.
Install counts and prices were read in October 2026 on WordPress.org and on official pricing pages. The directory shows ranges (“4+ million”), not exact figures.
1. Yoast SEO: the benchmark, with paid redirects
What it does
Yoast SEO, owned by Newfold Digital since 2021, is the most installed SEO plugin for WordPress, in the directory’s top band (10+ million). It handles title and description templates, canonicals, an advanced sitemap and a structured data graph that links the site, the organization, the author and the article.
Strengths
Its maturity shows everywhere: a two-week release cycle, extensive developer documentation, stable, documented filters (wpseo_title, wpseo_metadesc) that many themes and extensions rely on. Its readability and keyphrase analysis guides beginner editorial teams effectively. In 2024, Patchstack ranked it first for security practices, thanks to a clear disclosure policy.
Limits
The redirect manager is Premium only, as are IndexNow and the AI features. The latest version requires WordPress 6.9. And the FAQ and HowTo blocks are still offered even though Google no longer shows those rich results.
In 2026, Yoast fixed XSS flaws exploitable by a contributor through schema block attributes, as well as a Premium flaw: in file-based redirect mode on Apache, a user able to edit posts could inject directives into the .htaccess file. Yoast found no evidence of exploitation and fixed it in version 27.6.1.
Price and audience
Yoast SEO Premium costs $118.80 per year, excluding VAT, per site, in October 2026. It suits editorial teams that want guidance and developers who need a documented API.
2. Rank Math: the most generous free version, worth watching
What it does
Rank Math, owned by group.one since 2023, has more than 4 million installs. Its free version is one of the most complete on the market: redirect manager, 404 monitoring, more than sixteen schema types, breadcrumbs, one-click import from Yoast, All in One SEO or SEOPress.
Strengths
For a site that wants everything in one plugin without paying, the offer is hard to beat. The interface is polished, modules can be toggled individually, and the Pro version adds an advanced schema editor, video and news sitemaps, rank tracking and a content assistant.
Limits
That abundance comes at a cost in attack surface. Between May and August 2026, several flaws were fixed, including one that let an anonymous visitor change the homepage title and description, and a remote code execution reachable by an Author account. Then came the support agent episode of August 2026, described below. Back in 2024, Patchstack already criticized Rank Math for changelogs that were unclear about security fixes.
Price and audience
In October 2026, the pricing page showed us a PRO plan at €6.99 per month, billed annually and renewing at €8.99, for unlimited personal websites. Rank Math is aimed at sites that want free redirects and schema, provided someone follows its updates closely.
3. All in One SEO: the guided assistant, expensive at renewal
What it does
All in One SEO (AIOSEO), from Awesome Motive, has been in the directory since 2007 and has more than 2 million installs. Its free version covers sitemaps, automated schema markup, breadcrumbs, canonicals, a robots.txt editor and importers from most competitors.
Strengths
AIOSEO highlights a step-by-step setup wizard, and its dashboard is aimed at non-specialists. Local SEO modules and WooCommerce integrations are thorough in the higher plans.
Limits
The redirect manager and 404 tracking are only in the Pro and Elite plans. The displayed price is introductory: renewal is at full price, roughly double. On the security side, two recent flaws involved access tokens exposed to low-privilege users, fixed in 2026.
Price and audience
The Basic plan costs $49.50 for the first year for one site, then $99. The Pro plan, needed for redirects, starts at $199.50 for the first year. AIOSEO suits non-technical owners willing to pay for a tool that guides them.
4. SEOPress: the French plugin with a cheap unlimited license
What it does
SEOPress, developed in France by Benjamin Denis, takes a privacy-first stance and is white-label by default. Its free version, installed on more than 300,000 sites, handles dynamic titles and descriptions, Open Graph, canonicals, robots directives, XML and HTML sitemaps, and redirects at the post level.
Strengths
Its pricing model is the most agency-friendly: the unlimited license stays cheap, and renewal is at the same price. Migration from Yoast, Rank Math, AIOSEO, The SEO Framework or Squirrly takes one click.
Limits
Content schemas (articles, products) and their editor, breadcrumbs, the full redirect manager and 404 monitoring are PRO only; the free version only describes the organization. The free version also offers a setting for Google’s Indexing API, which only applies to job postings and livestreams.
Price and audience
SEOPress PRO costs $49 (€49) per year for one site and $149 for unlimited sites, renewing at the same price. It is the natural pick for agencies, owners of several sites and French-speaking teams.
5. The SEO Framework: sound settings with almost no interface
What it does
The SEO Framework, created in 2015 by Sybre Waaijer, automatically generates titles and descriptions, protects canonicals, outputs social tags, a sitemap integrated with core’s, and basic JSON-LD. It has more than 200,000 installs.
Strengths
According to its developer, it sends no data and sets no cookies; it shows no ads in the admin. Its defaults are correct without configuration. For a developer who wants a quiet, fast plugin, it is a coherent choice, in the same spirit as the lightweight tools in our list of WordPress speed optimization plugins.
Limits
It has no redirect manager, and advanced schema requires extensions. Above all, no version has been released on WordPress.org since December 10, 2025, and the listing is only tested up to WordPress 6.9.9. Development continues on GitHub, so the plugin is not abandoned, but that gap is worth watching. Its documentation still promises to “notify Google”, which Google no longer allows.
Price and audience
The plugin is free and complete. Paid plans, from $7 per month billed annually, add extensions and private support. It suits developers and sites that value restraint.
6. Slim SEO: lightweight, automatic, free redirects
What it does
Slim SEO, from the team behind Meta Box, automates almost everything: meta titles and descriptions, robots directives, social tags, a sitemap with image and news sitemaps, breadcrumbs, connected structured data. It has more than 70,000 installs.
Strengths
The free version includes redirect rules, automatic redirects when a slug changes and 404 link monitoring, which Yoast, AIOSEO and SEOPress charge for. It can even generate meta descriptions with AI using your own API key.
Limits
Few settings, by design. No content scoring in the free version, and a smaller support organization than the big vendors.
Price and audience
Slim SEO Pro starts at $59 per year for one site, for a visual schema builder and link suggestions. Slim SEO targets developers and site builders who want sensible defaults and free redirects.
7. SureRank: the newcomer from Brainstorm Force
What it does
SureRank, launched in April 2025 by Brainstorm Force (the maker of Astra and Spectra), passed 300,000 installs in eighteen months. It covers title and description templates, Open Graph, robots directives, a robots.txt editor, an XML sitemap, a schema builder and Google Search Console integration.
Strengths
The interface is clear and quick to learn, especially on sites built with Astra and Spectra. Site-level SEO checks are readable for a beginner.
Limits
It is a young product with no long track record. It still offers the noarchive directive, which Google no longer uses. The redirect manager is reserved for SureRank Pro.
Price and audience
The Pro plan costs $99 for the first year for ten sites, then $149 at renewal. SureRank suits beginners already working with Astra or Spectra.
8. Squirrly (GEO Plugin): the cloud-connected assistant
What it does
The plugin is now called “GEO Plugin by Squirrly SEO” on WordPress.org, a sign of its repositioning toward optimization for AI engines. It handles sitemaps, canonicals, robots directives, social tags, redirects and schema, and offers a live writing assistant and a to-do list for each priority page.
Strengths
Its “to-do” approach guides non-specialists page by page, with built-in keyword research. In the interest of transparency: the site you are reading uses Squirrly SEO for its metadata.
Limits
The main tools require a Squirrly cloud account. Its marketing highlights features Google does not use or restricts: llms.txt files, the Indexing API, FAQ and HowTo results. The listing is only tested up to WordPress 7.0.6, and the plugin has more than 30,000 installs.
Price and audience
A free plan limited to one priority page exists. The PRO plan costs $19.99 per month, billed annually, for five sites. Squirrly is aimed at owners who want to be walked through things, page after page.
9. Schema & Structured Data for WP & AMP: the schema specialist
What it does
This plugin from Magazine3, installed on more than 100,000 sites, does one thing: structured data. It offers more than 35 schema types, templates per content type, Gutenberg blocks and many integrations (WooCommerce, WPML, review plugins).
Strengths
For a site that needs fine-grained markup (events, recipes, job postings, software), it goes further than the generic schema of all-in-one SEO plugins.
Limits
The main risk is duplication: if your SEO plugin already outputs a schema graph, you must turn one of them off. Many of the types offered no longer produce a rich result on Google. Choose carefully, too: another schema plugin, WP SEO Structured Data Schema, was closed on WordPress.org in May 2026 for a security issue.
Price and audience
The free version is enough for many sites; paid licenses start at $99 per year. It suits sites whose content fits specific schema types.
10. Redirection: the free redirect manager
What it does
Redirection, by John Godley, in the directory since 2007 and installed on more than 2 million sites, handles 301 redirects, regular expressions, permalink change monitoring, conditional redirects, a 404 log and export to Apache or Nginx.
Strengths
It is entirely free, with no premium version. It is the ideal complement to an SEO plugin whose free version lacks a redirect manager: Yoast, AIOSEO (free, Basic or Plus), free SEOPress or The SEO Framework. It is the go-to tool during a redesign, as our guide on how to migrate a WordPress site without downtime explains.
Limits
By default, every redirect runs through WordPress, which costs a little server time. Logs can grow quickly. And if your SEO plugin also manages redirects, pick one or the other, never both.
Price and audience
Free. It suits every site that changes URLs, structure or domain.
The Rank Math case: when an SEO plugin handed itself the admin keys
An SEO plugin has wide access: it rewrites titles, robots directives and redirects and, since 2026, exposes “abilities” that AI assistants can drive. The episode below, documented by Search Engine Journal and The Repository, shows why its security culture is a selection criterion in its own right.
The context
In spring and summer 2026, Rank Math fixed a series of flaws. Among them was an unauthenticated change of the homepage title and description, published in late May, and a remote code execution reachable by an Author account, fixed in late August. Nothing unusual in itself for such a feature-rich plugin, but a pace that demands quick updates.
What happened
On August 26, 2026, version 1.0.277 fixed about a dozen flaws and added a “Support Agent”, an assistant that answers support questions. To update safely, you therefore had to accept the new feature.
According to Search Engine Journal and The Repository, when an administrator of a site connected to a Rank Math account opened the help tab, the plugin created a WordPress Application Password in their name and sent it to group.one’s servers. The password inherited all of the user’s rights, did not expire and could not be turned off in the plugin. The terms checkbox only appeared after the credential had been created and sent.
Sybre Waaijer, author of the competing plugin The SEO Framework, spotted the mechanism in late August while reviewing what should have been a routine security patch, and made it public. Search Engine Journal pointed out that the WordPress directory guidelines require explicit consent before any contact with an external server. The affected sites had connected a Rank Math account, but the administrator credential was created and sent before the terms were accepted.
The response
On August 31, version 1.0.277.2 paused the agent “while we add further transparency”. Rank Math says the credentials were neither stored nor kept on its side and were only used during a support session. It adds that the agent was read-only and could not change the site; Sybre Waaijer replied that the Application Password itself carried no such restriction. The company promises the feature will return with an explicit access request before any credential is created.
Esther de Cózar, partnerships manager at WP Media (part of group.one), acknowledged to The Repository that the credential was created before the user had explicitly agreed, and that the company was not defending that aspect. She disputed the “back door” label, however, since the credential went through WordPress’s official API and remained visible in the profile.
Rank Math was not hacked, contrary to a remark by Matt Mullenweg, who also called for a security audit of plugins with administrator access. The Plugins Team said it was in the early stages of that discussion.
What to check on your sites
On any site that ran version 1.0.277 or 1.0.277.1, open each administrator’s account (Users, then Edit), Application Passwords section, and revoke the entries starting with “WAP”. Then update the plugin. More broadly, the tools in our comparison of WordPress security plugins help you spot this kind of change.
What the affair says about SEO plugins
An SEO plugin is not just a writing aid: it touches every page and holds broad rights. The AI features added in 2026 widened what it can do, and several of the year’s flaws sat precisely in those features. Read changelogs before updating a production site, especially when a security fix arrives bundled with something new.
How to choose
One rule first: one SEO plugin, one source of structured data, one redirect manager. Duplicates produce conflicting titles and schema.
For an editorial site
Yoast SEO for writing guidance, plus Redirection if you stay on the free version. Rank Math if you want everything for free and keep up with its updates.
For a store
The needs are product pages, categories and filters. Yoast WooCommerce SEO, Rank Math or SEOPress PRO cover these cases; our WooCommerce SEO guide explains what really matters.
For a developer or a lightweight site
The SEO Framework or Slim SEO, for sound defaults without overhead. Slim SEO has the advantage of free redirects.
For an agency
SEOPress PRO for its unlimited license with stable renewal, or Rank Math in its agency plans. Either way, keep a shared configuration template across all your sites. Our selection of essential WordPress plugins helps build the rest of the stack.
Summary table
| Plugin | Free redirects | Schema in free | Entry price (Oct. 2026) | Best for |
|---|---|---|---|---|
| Yoast SEO | No | Yes | $118.80 per year excl. VAT | Editorial teams |
| Rank Math | Yes | Yes | €6.99 per month (annual) | Free all-in-one |
| All in One SEO | No | Yes | $49.50 first year | Guided beginners |
| SEOPress | Per post | Basic (organization) | $49 per year | Agencies |
| The SEO Framework | Per post | Basic | Free | Developers |
| Slim SEO | Yes | Yes | Free, Pro $59 per year | Lightweight sites |
| SureRank | No (Pro) | Yes | Free, Pro $99 first year | Astra or Spectra sites |
| Squirrly | Yes | Yes | $19.99 per month (annual) | Step-by-step guidance |
| Schema & Structured Data | Not applicable | Yes, 35+ types | Free, $99 per year | Specialized schema |
| Redirection | Yes, complete | Not applicable | Free | Redesigns, migrations |
Frequently asked questions
Do I still need an SEO plugin if WordPress creates a sitemap?
Yes, for the meta description, social tags, structured data (including breadcrumb markup, which the native WordPress 7.0 block does not output) and per-page robots settings. For a very small site, a free lightweight plugin is enough.
Can I run two SEO plugins at the same time?
It is not recommended. Two plugins often print two titles, two descriptions or two conflicting schema graphs. If you add a specialized plugin (schema or redirects), turn off the equivalent feature in your main plugin.
Does an llms.txt file help on Google?
No. Google stated in June 2026 that these files are not needed for Google Search and have no effect on visibility. You can generate one, without expecting any result.
Does schema markup guarantee a rich result?
No. It makes the page eligible, with no guarantee, and the list of rich results has shrunk considerably: no FAQ since May 2026, no HowTo since 2023. Correct markup still helps Google understand the page.
How do I switch plugins without losing my titles?
Rank Math, AIOSEO, SEOPress, Squirrly and The SEO Framework (through an extension) import titles and descriptions from the main competitors. Run the import on a test copy, compare a few pages before and after, then deactivate the old plugin.
Conclusion
Start by knowing what WordPress already does, then choose the plugin that adds what your site is missing, without paying for features Google no longer uses. For many sites, a well-configured free plugin, plus Redirection if needed, covers the essentials.
And treat your SEO plugin as a sensitive component: update it promptly, read its changelogs, and check from time to time who has access to your admin.
Sources
- Make WordPress Core (July 22, 2020). New XML Sitemaps Functionality in WordPress 5.5
- Make WordPress Core (February 19, 2021). Robots API and max-image-preview directive in WordPress 5.7
- Make WordPress Core (March 8, 2024). Miscellaneous developer changes in WordPress 6.5
- Google Search Central (2026). Control your snippets in search results
- Google Search Central (2026). Build and submit a sitemap
- Google Search Central. Introduction to structured data markup
- Google Search Central (2026). Latest Google Search documentation updates
- Google Search Central (2026). Optimizing for generative AI features
- Google Search Central (2026). Robots meta tag specifications
- WordPress.org (October 2026). Yoast SEO
- WordPress.org (October 2026). Rank Math SEO
- WordPress.org (October 2026). The SEO Framework
- WordPress.org (October 2026). Redirection
- AIOSEO (October 2026). Pricing
- SEOPress (October 2026). Pricing
- Yoast (May 26, 2026). Yoast SEO Premium 27.6.1: additional security measures for redirect handling
- Search Engine Journal, Roger Montti (August 30, 2026). Rank Math WordPress Plugin Accused Of Secretly Taking Admin Access
- The Repository, Rae Morey (September 2, 2026). Rank Math Pulls Controversial Support Agent as Matt Mullenweg Calls for Plugin Audits
- Rank Math (2026). Why the Rank Math Support Agent Is Temporarily Paused
- WordPress Developer Resources. Detailed Plugin Guidelines
- Google Search Central (June 2026). Third-party SEO tools, services, and advice
- Make WordPress Core (May 14, 2026). WordPress 7.0 Field Guide
- Yoast (October 2026). Yoast SEO Premium
- Rank Math (October 2026). Pricing
- Rank Math. Changelog
- SureRank (October 2026). Plans
- Patchstack (September 2024). Best WordPress SEO plugins, security comparison
LaFactory designs, builds and maintains WordPress and WooCommerce sites, SEO included, and develops its own plugins. Talk to us about your WordPress project.