Updating WordPress, themes and plugins safely
Update regularly without breaking your site.
Most hacked WordPress sites were running out-of-date plugins. Update regularly, safely:
- Back up first. See Backing up WordPress.
- Go to Dashboard → Updates.
- Update plugins and themes a few at a time, not all at once.
- Update WordPress core.
- Check your site after each step: home page, a form, and the checkout if you run a store.
If an update breaks the site
- In File Manager, open
wp-content/pluginsand rename the folder of the plugin you just updated (for example add-off). The site comes back. - Restore your backup, or wait for a fixed version of the plugin.
Turn on automatic updates for minor WordPress releases and for plugins you trust, under Plugins → Enable auto-updates.