Private Property Band & The Music Machine
← Back to SEO & Visibility AuditThe short version
Both sites are working today — nothing here is broken or urgent. But under the hood they run on a modern WordPress engine bolted to a decade-old theme and a heavy, aging plugin stack. That combination quietly costs search visibility (slow pages rank lower) and carries real security exposure (a couple of these plugins have well-known histories of being hacked). The durable answer is a clean rebuild on Cloudflare — the same network your sites already use — done as a deliberate Phase 2, after the current SEO work has proven its results. This page lays out exactly what we found and what that path looks like.
🔍 WHAT WE FOUND
Pulled live from both sites' page source on June 13, 2026. These aren't opinions — they're what the code is actually shipping to every visitor and every search engine. The colored tag on each shows how urgent it is.
Critical High Worth addressing Minor
Theme: RT-Theme 18 (circa 2014) · WP core 6.9.4 (current)
The engine is up to date, but the chassis is ~10 years old. Modern fixes increasingly fight an outdated theme, and every change risks breaking something fragile.
WPBakery (~350–400 refs/page) + Elementor both loaded
The sites load two competing page-builder systems simultaneously — double the code, double the conflict surface. This is pure dead weight slowing every page.
Slider Revolution (both) · legacy MailPoet "wysija" (Music Machine)
Slider Revolution is one of the most-attacked plugins in WordPress history; the "wysija" newsletter plugin is an abandoned, pre-2015 codebase. These are the doors attackers knock on first.
Measured on Google PageSpeed (mobile): both homepages score 37 and 49 / 100 for performance, with a largest-content load time of ~19–20 seconds — from 50–60 separate files per page.
Google's target for that load time is under 2.5 seconds — your homepages are roughly 8× slower. Google measures this directly as a ranking factor: slow pages get ranked down, and most mobile visitors leave before a 20-second page ever finishes loading.
Music Machine: two schema sources + a malformed entry · PPB: no business entity at all
The structured data that tells Google "who you are and where you work" is broken or missing on both — a foundational gap the SEO engagement is already fixing.
Tag manager installed, but no GA4 — zero traffic data since ~2023
There's no analytics recording who visits or where they come from. You can't improve what you can't measure — and right now the site measures nothing.
PHP 7.4.33 — WordPress itself flags it "no longer supported" · GoDaddy Managed WP
PHP 7.4 stopped getting security patches in late 2021. WordPress's own dashboard warns the update "reduces your risk of your site crashing" — yet the site still runs on it.
No site header field; theme + 3 plugins flagged "update for compatibility"
Adding a single line of SEO code means installing yet another plugin — there's nowhere clean to put it. That's the tax of this stack. On a modern build, it's one line in the <head>.
⚖️ WHAT THIS COSTS TODAY
Slow, bloated pages are ranked lower by Google. Every position you lose in Miami-area search is bookings going to the band that loads faster.
The aging plugins are a standing risk of a site compromise — which can mean downtime, a hacked booking page, or Google flagging the site, right when a client is trying to find you.
On this stack, even small edits risk breaking the layout. That makes the site expensive to maintain and slow to keep current — the opposite of what a working band needs.
🧭 THE PATH FORWARD
Your sites already run through Cloudflare's network today (it's your CDN). This isn't a leap to something unfamiliar — it's moving the site itself onto that same fast, secure foundation, rebuilt from the ground up.
A purpose-built site on Cloudflare loads near-instantly worldwide. Faster pages mean higher Google rankings and fewer visitors bouncing before they book.
No WordPress, no vulnerable plugins to exploit. The class of hacks the current stack is exposed to simply doesn't apply to a modern Cloudflare build.
No plugin-update treadmill, no theme breakage, lower hosting overhead. The site stays fast and current without constant patching.
The migration is done carefully so the rankings you build during the SEO engagement carry straight over — no lost ground. This is exactly why we sequence it after the SEO work, never during.
🤝 HOW WE'D RUN IT
We export everything. Both sites' content, pages, galleries, and song lists come across cleanly — nothing is lost.
We rebuild on Cloudflare. A clean, fast, modern site for each band — matching your brand, built by us, with the SEO work baked in from day one.
We maintain it for you, ongoing. This is the part that matters: you won't log into a fragile dashboard or chase plugin updates. You tell us what to change — a new photo, an updated song list, a fresh date — and we ship it. The sites stay fast, secure, and current as a managed service.
🛟 SO WE'RE CLEAR
We're not touching your live sites without your sign-off, and we're not migrating anything mid-engagement — disrupting your rankings while we're being paid to raise them would make no sense. The SEO work you're invested in stands entirely on its own. This page is a recommendation and a plan, not a sales push: when the moment is right, the move off WordPress is the durable, long-term answer — and it's work we're set up to own.