WooCommerce + WordPress Performance Issues

Poorly coded plugins or themes may allow attackers to inject malicious SQL commands through URL parameters or form inputs, targeting the WordPress database.

Hi all,

We’re running a WooCommerce-powered WordPress site [that’s] a high-traffic ecommerce store specializing in traditional Scottish attire. The site has been experiencing noticeable performance issues, especially during high-traffic periods and on key category/product pages (e.g., kilts, jackets, accessories).

Some specific issues:

• Slow load times (particularly on mobile)
• High TTFB on product archive pages
• Delays in checkout page rendering
• Admin dashboard lag with order volume increase

What we’ve tried so far:

• Caching via WP Rocket
• CDN with Cloudflare
• Lazy loading and asset minification
• WooCommerce database cleanup
• Theme and plugin audits (currently using a custom WooCommerce-compatible theme)

Despite these efforts, performance improvements have plateaued. We’re looking for advanced-level guidance on:

1. Custom query optimization for WooCommerce-heavy sites
2. Server-side configuration tips (we’re on a managed VPS)
3. Advanced WooCommerce performance tuning techniques
4. Experience with object caching or Redis in WordPress at scale

Would really appreciate any insights, similar case studies, or plugin recommendations that have worked for others running scalable WooCommerce stores.

Thanks in advance!

• Unauthorized data access
• User password theft
• Full site compromise
• Database corruption or deletion

Mitigation:

• Use trusted, regularly updated plugins
• Sanitize and validate all inputs
• Apply a Web Application Firewall (WAF)
• Keep WordPress and all components updated

• This topic was modified 1 day, 6 hours ago by Steven Stern (sterndata). Reason: moved url

The page I need help with: [log in to see the link]