Update WordPress, plugins and themes

An up-to-date site is a protected site: most hacks get in through an outdated plugin or theme. Updates fix security holes, improve speed and keep your site compatible with recent PHP versions. This guide explains how to update from the Upkyo client area, in which order, and what to do if something stops working afterwards.

Before you start

• Check that a recent backup exists in the Backups tab, or create one.
• Pick a quiet time, when your site gets few visitors.
• If your site is an online store, avoid updating during a busy sales period.

Update from the client area step by step

1. Open your hosting from My services.
2. Choose your site in Your WordPress sites.
3. Look at the Security section: it shows whether a WordPress update is available.
4. Click Update to start the update.
5. Open the Plugins tab to see pending updates for your plugins.
6. Open the Themes tab to see pending updates for your themes.
7. When done, visit your site and test the important pages.

Before a major update

Check that a recent backup exists in the Backups tab: if anything goes wrong, you can roll back in one click, see Restore a backup of your website.

A "major" update is, for example, a new major version of WordPress, of your theme or of a store plugin such as WooCommerce. Read the developer's release notes: they flag the changes that need special attention.

In which order should you update?

The recommended order reduces conflicts:

1. Plugins first, since they are often ready before WordPress.
2. WordPress core.
3. Themes last.

If you use a child theme, never edit the parent theme directly: your customizations would be lost at every update.

What if the site breaks after an update?

A blank page or "There has been a critical error on this website"

A plugin is probably not compatible. Rename its folder in httpdocs/wp-content/plugins with the Files tool (for example myplugin-off): WordPress disables it automatically. Then reload the site.

The site is stuck in maintenance mode

WordPress creates a .maintenance file during updates. If the update was interrupted, delete that file at the root of httpdocs.

Nothing works

Restore the backup taken before the update, see Restore a backup of your website, then open a support ticket so the faulty component can be identified.

Best practices

• Update at least once a month, and immediately when a security flaw is announced.
• Delete plugins and themes you do not use: even disabled, they remain a possible way in.
• Install only maintained plugins that were updated recently and are well rated.
• Check plugin compatibility before changing the PHP version, see Change the PHP version.
• Keep a short list of your plugins and why you use them: it makes cleanup much easier.

Frequently asked questions

Why should I update WordPress?

Each update fixes security holes found in the previous version. A site that is never updated becomes an easy target for bots that scan the web for those holes.

Can an update break my site?

It is rare, but a plugin can be incompatible with the new version. That is why you should check that a backup exists first: you can roll back in one click.

How do I know if an update is available?

Open your site in Your WordPress sites: the Security section shows it for WordPress, and the Plugins and Themes tabs show the rest. The WordPress dashboard also shows a counter under Dashboard then Updates.

Should I update themes I do not use?

The simplest option is to delete them. Keep only the active theme and, if needed, one default WordPress theme for troubleshooting.

My site says "Briefly unavailable for scheduled maintenance", what should I do?

Delete the .maintenance file at the root of httpdocs with the Files tool. The site will show again immediately.