Welcome to the Q&A Forum

And this is the point where you clearly can see that RWD (responsive web design) isn't "one-size-fit-all" solution.

You have few choices but all are weird - double menu, hamburger + kebap menu, sticky menu on left, etc. But as i said this is weird. And only A/B test can show how they works.

I think that best in your case is to try sticky menu on top. One of best example is here:
http://getskeleton.com/
but you need to watch this on desktop. When you scroll down you can see that "Intro Code Examples More" is sticky on top. In your site you need to make changes to "Gallery Partners Pricing". This menu can be sticky even for desktop. This will bring more size in width for main content.

As i said - only A/B test can show who's right. Because all double menus have better navigation but in reality confuses user with "paradox of choice".

I have talk about WordPress security before month ago in WordPress Bulgaria 2015.

So very short - if you have update to latest versions of core, plugins and themes and they're stable you don't have anything to worry about.

The problem is when some of them comes with non well checked code - most plugins or themes. This mean that if there is some vulnerability you can be infected over and over. Same can happen if you download from illegal sites plugin/theme with some added code as vulnerability. Don't think that "this won't happen on me" because this is one of most frequently way to distribute malware to users.

All that security layers add extra PHP code that need to be executed and slow down site. They also bring issues to some users. I never forget when few months ago ping in Twitter some site that i can reach their site from Bulgaria. Yes - due settings in their "security" plugin.

That's why you need few ways:

• you need to use only plugins/themes from original author. If they're on WordPress.org then this is preferred. This doesn't mean that they can't have some vulnerability, but you just minimize chance
• you need to update them regular
• you need to use only proven plugins/themes in your practice. I believe that plugins with 100k installs is tested than plugin with 10 installs
• you always should keep backup of site and it's database local on your computer. In hacked site case - you just need to restore from backup for 5-10 mins
• keep backups on regular basis - can be plugin or manually. There you can diff backups for changes very quick
• you need some skills to investigate web attacks using checking web server log files. I do this on daily basis for mine most important sites. If some IPs or user agents doesn't follow rules - deny their access
• in case of hack - keep archive of hacked site and then recover. One of huge mistake more novices make is to trying to clean site. Most of malwares keep somewhere in WP "dead hand" and they're back later. Experts (like me) need lot of time to find and disabled them. With backups - this is piece of cake
• If you follow this but keep hacked... then think out of box - maybe plugin have unknown vulnerability or theme. Sometime other sites/scripts working on same hosting account can infect you. I have even seen infected whole hosting company on server level. Then you need expert assistance. You can find this in WP forum and/or in your hosting provider.
• Some hosting providers provide extra service as - WordPress hosting. This is often high-speed solution with added extra level of security on server level. I can recommend SiteGround, WPEngine or nestify.io

List is really long and boring. But if you follow all these rules - you don't need "security" plugin. It's critical for you to know what's happen in WP and when this is happening. I often can see people that doesn't know that they're infected but they doesn't have backups or archives. This make mine job longer and expensive.

PS: I know that checking site on daily basis sound little bit scary. But take me maximum 5 minutes per site for day.

If you wish to see performance of KWs or pags you can see few tricks from today post in Moz:
https://moz.com/blog/single-best-seo-tip-for-improved-web-traffic
Yes - SearchConsole is heavy involved in process.

Mobile dev here!

So for all stores (AppStore + GooglePlay + Microsoft Marketplace + Amazon App Store + etc) algorithm is simple - they calculate ALL ratings on all versions. Some of them only for local store, other for global.

Example Duolungo:
https://itunes.apple.com/bg/app/duolingo-learn-spanish-french/id570060128?mt=8 <- this is in local Bulgarian Market. 4.928 in 9 ratings.
https://itunes.apple.com/us/app/duolingo-learn-spanish-french/id570060128?mt=8 <- in US market. 4.791 in 4068 ratings.
https://play.google.com/store/apps/details?id=com.duolingo&hl=en <- Worldwide. 4.648 in 2343538 ratings.

As you can see sites provide correct review rating to Google but they rounding it. Probably your guess for over 4.75 is correct. There isn't official explanation from Google about this. Some sites showing 5 star rating system. Other 10 star - 0, 0.5, 1, 1.5, 2, 2.5, 3, 3.5, 4, 4.5, 5. For other it's complicated because i have seen even results as 4.2 and this is 100 star rating system.

True.

First make backup and then proceed with #2 or #3. Also you can improve little bit #3 with few "extra" tips and just to see movements in SERP. Because you know - there is vacantions ahead and probably beginning of 2016 you can see move.

Of course implement good and old tricks - social signals, little bit fresh links from authoritative and trusted sources. Also you can put there videos - one video can put your average visit duration up and do engagement. Example is Moz  - their regular articles are text-text-text-image-text-text-image and so on. But their WBF articles are text-video (length approx. 10 mins)-text-text-text.

#2 is same way as Brian Dean (Backlinko) - Skyscraper Technique.
Also Rand Fishkin talk about that as 10x http://www.slideshare.net/randfish/onsite-seo-in-2015-an-elegant-weapon-for-a-more-civilized-marketer/102-10X_Content_is_the_Future

Skeleton have JS to NOT include sticky menu on mobile. But was nice example about mine idea and first that i remember quick during writing this comment.

Second idea is sticky menu with "Hamburger_icon Gallery Partners Price" for mobile and normal (just as now) for desktop. This probably can skip confusing users about menu and hierarchical structure of your website.

But as i said - A/B testing is needed.

You need to check link presence with help of Google Cache.

Some toxic assets using link cloaking so only Google can see links, but users can't find them. Isn't fair, but can be seen often.

You are using Sucuri for protecting your WordPress. And they using JavaScript redirectors as you can see it.

IT's much better to disable such redirectors because they simply kill all your SEO/SMM efforts.

Get iOS or Google Play link of app and paste it on SDTT (Structured Data Testing Tool).

That's all. In SDTT they're even deep than 3 points...

No, since you didn't make DOM manipulation. So isn't "hidden".
But it's little bit confusing to user. Please make some A/B test and see is scrolling works or doesn't.

I understand your fears completely because WP + themes + plugins can be HUGE mess.

Why? Because some of devs don't know technical and on-page SEO. I have seen themes where they put text "Comments" within H1 tag. At same time post title was encapsulated with H3. Things as hidden text, messy HTML codes, bloatware HTML are countless. You also can get server overloading, slow SQL queries and some issues. Can be performance issues, PHP issues, hosting issues. Running WP mean that you will get 10 CSS files and 10 JS libraries. And this is "best case scenario". Just imagine what is worst. Now add "upgrading" procedure where everything can be broken (or changed!) with just one click. Ah, and mine favorite - security exploits and hacking. Sound like "perfect storm". Isn't?

Now i know that this sound scary. That's why you should see and review HTML code of WP before migration. Probably you will see potential for improvements. And this changes need to be patched over original files (i'm talking about theme or plugins). For theme is OK - you can make child theme based on original. But for plugins - you need to "fork" original plugin and make your own custom version. Then on each update you should "diff" your version and original to keep your patches and new code. This mean very strong backup solution plus local dev environment and extra work on each update.

Also - it's year of 2016. Why you don't around for alternatives? I can give you suggestion - static site generators:
https://www.smashingmagazine.com/2015/11/modern-static-website-generators-next-big-thing/
https://www.smashingmagazine.com/2015/11/static-website-generators-jekyll-middleman-roots-hugo-review/

As you can see i'm not giving answer Yes or No. I'm just giving you few extra points to think about. Just put cards on the table.

PS: May sound negative little bit because i have some theme and plugins in past. One wrong choice and all SEO efforts can be ruined. Such is life...

Glossary:
"fork" - process of creating different version of something existing with some changes that doesn't exist in original. You can hear that devs are forking projects too. In your case - since you can apply your patches but on next update everything will be gone back to original. That's why you need to fork them.
"diff" - process for checking difference between files/project and extracting/showing only difference between them.

Yeah - this IS problem.

I have friend of mine who runs webhosting for "free hosting". And he told me that no way to get to 1st page with anything lower than 10k root domains is mission impossible. Also in terms of backlinks their scale is in millions. Only getting there is more and more links from anywhere in the world, any site from any niche. And i saw statistics... he is right.

The problem that if you're in some similar industry then maybe patience is over. And maybe next Penguin will fix this, but we already heard this many times. So you can play few games:

• you can keep building links as before. Only pure white hat from various sources. Can be game magazine, game shows, local meetups, etc.
• you can use some gray hat techniques. Forum links, blog comments, etc.
• you can purchase some expired domains on game niche. Using tools as http://tool.domains/ for finding and evaluating them.
• this is blackhat and i won't recommend it but when all options are on the table - using PBN network or PDF linking. And this is "white side of blackhat". There is dark side of blackhat using software vulnerability like in 3P industry (Pharma, Poker and Porn). As i said before it's better to stay away from that, computer hacking can be also federal crime. Even don't think to use this for real client. Bad guys used them for "churn and burn" method where domain is used for few days, then blacklisted; but guys get new domain and used it for few days; next domain...
• sponsoring some good players - like Fatal1ty
• sponsoring some good video game streamers - you can look for them in Twitch or YouTube. One of closest example is mine friend called Gothika47 (i can connect you if you wish). He run video channel in YT https://www.youtube.com/user/VoodooHeadsTV and Twitch http://www.twitch.tv/gothika_47 (he was moved from Hitbox before month ago). So that streamers can bring you HUGE audience if you're used them proper. I was watch streams with over 1k viewers online and this is WOW because streamer listen watchers and can do their requests.
• creating infographic with LOL skills or even build calculator for LOL or item calculator; you can also make "for dummies" walktrough for novices; also strategy guides, clan guides, etc. You also can make a videos about that - only for novices.
• something other... just think about giving "value" to users

As you can see this list isn't full and can be extended with many more ways. But always think "how we should add value to community?" Because this is important to them and this will drive sales.

PS: Dificult situation - LOL is trade mark owned from Riot Games. And should think about possible legal issues from using their TM too.

There are few likes - likes to Facebook Page and likes to Web Pages. Since i don't understand your question will explain both cases.

1. Facebook Page likes will be not touched.

2. Website Pages likes will be lost will be lost. Facebook bot will follow 301 redirect but will not pass likes to new url.

There is "hack" Like button like this:

if you change data-href in this example - you will change URL for liking and counter can be saved. So you can implement this technique and wait for better times when bot will follow like values to new url. If this happen anyway.

You need definitely to check this article:
https://moz.com/blog/hreflang-behaviour-insights
https://moz.com/blog/open-source-library-tool-check-hreflang
and fix 302 with correct hreflang annotations. Also don't forget default language.

About linkbuilding. After you fix this "hreflang" then you should do both - building links for main (default) language and build links for country languages from country specific resources. Like french sites linking to french directory/pages.

Just as Matt says not all 301 are equal.

And you need to check your sitemap about changing URL. Maybe sitemap holds also old URL?
You need to check your content about old URL too and change it to new one.
You need to check your canonical about old URL and to replace with new one.

For me this is technical SEO/onpage SEO issue and you forget something with 301 redirect.

Well everything is doable - but remember about users first.

So - lets imagine that i'm looking for someone to be official photograph of mine wedding or engagement or baby photo session. So first if i look is text "i'm photograph that can make your special events memorable...". Ok - you have such text. Second is gallery, 3rd some reviews and pricing. Now in mobile design people just can't reach to them and you get visits with 1 page per session. Right?

That's why i think that "Hamburger Gallery Partners Price" could work. Hamburger is actual menu as now - just need to make it sticky with "Gallery Partners Price". WHY?

Let's assume that i'm on mobile and browsing for "Edinburgh wedding photographer". I see results (term is SERP - search engine result pages) and i click on your site. So i start reading your texts. And as i scroll down to them - sticky menu appear on top. And users can click on them - in result you can have user convinced that "here is the man". So they can give you a call or fill contact form.

2nd Idea - place somewhere in sticky menu "phone" icon that will be linked to your phone using "callto:here-is-your-phone-number". So give user another way to book you.

If you know what you do then you can use 410.

Because with 404 bot will coming to check that pages many times. With 410 it's only one or twice. Example from mine .htaccess:

Redirect 410 /salons/galka-3/
Redirect 410 /salons/galka-4/
Redirect 410 /salons/galka-1/
Redirect 410 /salons/galka-2/

As you can see it's very easy and and sleek. BUT beware because if you send 410 to normal page then later you can't get this page ranked!

There are two reasons that i still didn't move to HTTPS:

1. Twitter counter
2. Facebook likes

Since Twitter counter was killed only remain likes. But i will move soon w/o waiting for them. Only G+ follow 301 redirect and pass links.

There isn't proper way as you want it.

You can make .com and .co.uk country preferred with geo targeting:
https://support.google.com/webmasters/answer/62399
but this doesn't limit indian users that type english queries to see your sites in SERP. This is best way IMHO.

If you need true protection against indian users then you need to make some changes. You can get list of GeoIP database:
http://php.net/manual/en/book.geoip.php
and based on this code to give users access or stop them.
BUT this is very risky in real world since all bots comes from worldwide. Example - if you disable US IPs on .co.uk then you will stop GoogleBot visiting your site too. Also Roger will be stopped, Bing and many other bots. No bots - no ranking... This can be recognized as sneaky redirect.

So i don't recommend you to do this geo ip limitation without calculating all pros and cons of this.

So, this is HUGE technical SEO mess.

There are two chances - hosting or plugin:

1. Hosting - you can fix this with .htaccess quick. There are lot of examples in internet about adding or removing slash in end of url. You need to check and recheck your .htaccess or webserver configuration.
2. Plugin - sometime when WP update their plugins some of them comes with something more than bugfix or improvement. This is how they think "shouldn't hurt anybody", but in reality hurt ANYBODY because broke things. You need to try disable plugins one-by-one and see is this caused from them. This can be caused also from theme, WP itself and/or some custom code.

This is cause of problem. But fix is hard because you need evaluate approx time of chance. There are two cases:

1. If this happen soon you should fix it ASAP because for bots old pages are missing (you need to confirm that, please check, sometime they can 301 to new page).
2. If this happen few months ago and rankings wasn't lost then you can leave it in new format (do also .htaccess fix!). If rankings was lost then you can try to fix this (and also .htaccess fix!). It's difficult decision anyway.

As you can see everything dependent how long is this change and what damages already make. Try to see in SearchConsole more info about crawl and ranking.

I will save you little time with code for removing AND adding trailing slashes:
RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)/$ /$1 [L,R=301]

RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^(.*[^/])$ /$1/ [L,R=301]

First code remove /, second code add / to urls. You also need to check canonicals, sitemaps and fix them according changes.

And one tip. You should always install in WP some plugin for backups. Period. You wasn't first nor last person in the world with situation "something happens". Of course one weekly backup cost you a penny and can save many hours of debugging or trying to fix things. There are many plugins in market with many different features so i can't give advise what will fit to your needs.