You may or may not be aware that you need to keep your WordPress core files up to date – all of the time. In this article I will show you how to upate WordPress and I will answer the most common questions related to this task.

What are WordPress core files?

These are the files that contain the code that make your WordPress website run. They are not the plugins you add once your WordPress site is up and running. Nope, they are just the core files that everyone has. They control the admin area so you can change your website to give it any look and functionality you like.

Why do I need to update the core files?

The WordPress development team work very hard behind the scenes to fix bugs in the code and to keep your WordPress site secure. New releases contain bug fixes, new functionality and security updates to keep your site as secure and bug-free as possible.

This is probably a good place to say there are major and minor updates. Major releases happen when new functionality is added to WordPress, minor updates happen when bug fixes and security patches are added. You can read more about versioning here

“But why do I have to update WordPress myself?” you may be wondering….

Because WordPress is free. It’s your responsibility to make sure it is always updated. Other website providers such as Wix will charge you and part of their fee covers this updating process.

WordPress sometimes gets a bad name as being easy to hack but the truth is people forget to update their site or they don’t know how to do. Sites running on old versions of WordPress leave themselves open to hackers. Why? Because hackers love finding weaknesses in systems. They will try to find vulnerabilities in WordPress before the developers do. When they do, they create an automated script that targets WordPress sites, they look for that particular vulnerability and when they find it, bam.. they can hack into your site.

All this is avoided by just keeping your site updated.

How do I know if my WordPress website needs updating?

Hopefully, you now see the importance of keeping your site updated. It is equally important to know WHEN you need to update! Go to your Dashboard and at the top, on the left-hand side you will see ‘UPDATES’. Next to updates you will see a number in a coloured bubble. This is the number of updates that are needed. Most of these will be plugin updates but if you click on the updates tab, you will see a list telling you exactly what needs to be updated. If WordPress needs to be updated you will see a message at the top of the list.

How do I know if my wordpress website needs updating

How often does WordPress need to be updated?

Updates are frequent. If you don’t log in to your website for a few months I guarantee that when you do you will have missed a few essential updates. Take a look at this list of updates, you will see there are usually a few updates each month.

What if I don’t have time to manually check for WordPress updates?

Manually checking for updates can take precious time that I’m sure you don’t have. I use a plugin called WordFence. It has a free version that sends you a message whenever something needs updating. You don’t need to always go to your dashboard. Just wait for the WordFence email, then go to your dashboard and check out what needs updating. Easy.

[et_bloom_inline optin_id=”optin_2″]

How do I update my WordPress site?

Ok, now you know your site needs to be updated, what do you do next? Keeping your site updated can still feel like a big task but believe me the more times you do, the easier it will become. Let me explain how you can keep your site updated and I’ll also cover some VERY important information you need to be aware of before you update. But first let me explain, the different ways you can update your WordPress website. You can update manually or automatically.

What is a manual WordPress website update?

A manual WordPress update is where you have to click on a button in your admin area that says UPDATE NOW. See that figure above that tells you your WordPress core files needs to be updated? Well, right there is a big blue button that says “UPDATE NOW”. A manual update just means you manually click on that button.  When you click on this button your site will automatically be put in maintenance mode while the update is going on. It usually takes less than minute to complete and you will see a message when it is complete. However, don’t be fooled into thinking it’s as simple as that. There are certain things that need to be done BEFORE and AFTER an update. Please see the sections at the end of this post “What to do BEFORE a WordPress update” and “What to do AFTER a WordPress update”.

What is an automatic WordPress website update?

An automatic WordPress update is where there is no pressing of buttons, no checking for updates, WordPress just updates itself, whenever there is an update. While this may sound like a dream scenario there is one big problem associated with automatic updates. That problem is there is no checking for incompatibility after an update. The worst case scenario – which is more common than you may think, is where your WordPress website has updated while you cosy sleeping in your bed, but unknown to you, it caused half of your website to disappear because a plugin was suddenly incompatible with the new version of WordPress. You need to think carefully if automatic updating is for you.

Are automatic WordPress updates suitable for me?

To answer this question we need to assess the risk of incompatibilities. I have been building WordPress websites for over 7 years and incompatibilities are something I see far too often. There are two main factors that put you at risk of incompatibilities.

  1. You are using many plugins on your site. In fact, you thought the more the merrier! You love plugins and all the whistles and bells they allowed you to add to your website.
  2. Many of your plugins are from ‘I don’t care where/who so long as it’s free’.

Let me explain. If you are using tons of plugins, you have more chances of things going wrong. Limiting your plugins means limiting your risk. Too many plugins slow down your site and overcomplicate your build so limiting your plugin use improves speed, reduces your overwhelm and simplifies your job as a webmaster. (By the way, if you are managing your own website then you are a webmaster).

If you are not thinking carefully about where your plugins are coming from there is a big risk that the developer will not keep them updated. This means that there is a big risk of incompatibility issues with each new release of WordPress.

It’s always best to use plugins from a reputable source and to avoid free plugins from a developer with no reputation.

TIP: To find the best plugins, always check the ratings and always check when the plugin was last updated. It needs to be tested with the recent WordPress installation too. 

How do I disable automatic WordPress updates?

By adding this line of code to your wp-config.php file (always take a backup of your file before modifying it).

define( 'WP_AUTO_UPDATE_CORE', false );

How do I enable automatic WordPress updates?

By adding this line of code to your wp-config.php file (always take a backup of your file before modifying it).

define( 'WP_AUTO_UPDATE_CORE', true );

How do I manage WordPress updates without touching any code?

Updating code IN a file is not everyone’s bag, so there is a neat little plugin you can use

What should I do before a WordPress update? [**ESSENTIAL READING**]

Before you update, whether automatic or manual, you need to back up everything. Not only that, you need to have a restore procedure in place should anything go wrong.

Some web hosting companies provide backups but depending on the package you are paying for they may not be suitable. They might not backup before an automatic update for instance. Or you might have to pay for a restore.

If you are on a tight budget, I recommend the Free version of Updraft. You will need to be doing manual updates for this to work for you because the free version doesn’t take a backup before updating.

If you have a bit of budget and don’t want to do manual updates, then go for the paid version which also takes a back up just before updating.

There are other plugins but this is the one I use for my clients who are on a low budget and are happy with manual updates.

What should I do after a WordPress update?  [**ESSENTIAL READING**]

You should verify everything is working. Check each of your main pages (home / about / contact etc) and check your blogs load as expected. Then check each functionality e.g. do you have a social sharing plugin? Then check you can share your stuff. Work through each plugin so you can verify it works as expected. This may take you some time depending on how much functionality you have on your website.  If you find a problem then you will need to disable your plugin. Contact the developer to find out when it will be updated. If it’s not going to be rectified quickly then you may have to consider an alternative plugin.

Over to you

Do you have any questions regarding the updating of your WordPress core files? Leave a comment below or email me at


[et_bloom_inline optin_id=”optin_2″]