Plugin

A publishing system comes with the basics. You add the rest with plugins: a contact form, SEO help, an image gallery, a cookie banner or a whole online store. In the Norwegian version of WordPress they are called "utvidelser", according to the official translation. Wix and Shopify call them apps.

Every plugin is a new supplier

A plugin is code written by someone else, often a small developer you have never heard of. It gets access to your site and has to be updated when someone finds flaws in it. If the developer stops maintaining it, the holes stay open.

Many plugins on the same site can also slow it down, because each of them can load its own files. That shows up in your page speed.

Clear out the list

If you have access to WordPress yourself, open "Plugins" ("Utvidelser" in the Norwegian admin) and go through the list. Delete the ones that are deactivated, and ask yourself whether you need the rest. Look each one up on wordpress.org/plugins and see when it was last updated. More than a year is a warning sign. If you do not have access, ask whoever runs the website for the list and those dates. Make sure there is a fresh backup before anything is deleted.