How to update WordPress website core files, themes and plug-ins

With out-of-date files to blame for 86% of hacked WordPress websites, it is vital that you know how to update WordPress website core files, themes and plug-ins effectively. If you’re unfamiliar with this process, this guide will help you out.

What we will cover

How do I know when I need to update?

Most WordPress websites are set up to automatically apply minor security and performance updates to the WordPress core files.

However, you will need to periodically log in to your website’s admin area (dashboard) to check whether any larger core file updates have landed, or to apply updates to themes and plug-ins.

For a standard single WordPress website installation (with a default dashboard design), you can spot, at a glance, if an update is due simply by looking at the side menu of your site’s dashboard, On the top left, you will see a red circle with a white number next to the ‘Updates’ label. The number tells you how many updates are required.

Clicking on the ‘Updates’ label will show you what those numbers relate to, which will either be the WordPress core files, plug-ins or themes.

How to update WordPress website core files

WordPress core files are updated several times a year in new versions of WordPress. From the updates screen you just accessed, you will see the version of WordPress your site is currently running (e.g. 5.8.2)

If there is a pending WordPress core file update, you will be prompted to back up your website and click a link to install the new version, once you’ve done so. We recommend you follow the advice to back up first, and there are several plug-ins that you can use for this.

Once you’ve backed up your site, you can simply return to the Updates page, click the update link and wait. You should see a couple of interim messages flash up on screen before being notified that the update was successful.

WordPress may also redirect you to a simple tutorial/information page so that you know what is included in the new update.

On the Update page, you may also notice that there is a link to enable automatic updates for all WordPress versions. This is a good idea, from a security standpoint, but be aware that big updates can sometimes cause compatibility issues with themes and plug-ins.

We run through some of these at the end of this article.

How to update WordPress website themes

Your active WordPress theme determines how your website looks to others. Changing themes will completely overhaul your website’s appearance.

WordPress theme providers regularly update their themes to improve their performance, patch vulnerabilities and add new features and design elements.

Updating your WordPress theme is a simple process.

Once again, go to the Updates page and scroll down until you see the ‘Themes’ heading. If updates are pending, you will see a number, in parentheses, next to the heading followed by a table showing the available updates.

You can click the checkbox next to each update or the ‘Select All’ checkbox on the bottom row of the table. Next, click either of the two ‘Update Themes’ buttons.

As with the core files updates, expect to see some interim messages flash up on the screen. As long as you get the ‘All updates have been completed’ message at the end of it, you’re good to go.

How to update WordPress website plug-ins

Plug-ins are powerful programs which add features to your website. As with theme developers, plug-in developers regularly update their code for performance and security reasons.

To update any plug-ins, you need to follow the same process as for updating themes. In other words:

First, go to the Updates page and scroll down until you see the ‘Plugins’ heading. If updates are pending, you will see a number, in parentheses, next to the heading followed by a table showing the available updates.

You can click the checkbox next to each update or the ‘Select All’ checkbox on the bottom row of the table. Next, click either of the two ‘Update Plugins’ buttons.

As with the core files and themes updates, you will see some interim messages followed by the ‘All updates have been completed’ message at the end of it, you’re good to go.

Before you log out of your WordPress admin area, it is a good idea to check the menu. The ‘Updates’ label should no longer have a red circle beside it, indicating that you are now completely up to date and protected.

Potential issues with updates

Now you know how to update WordPress core files, themes and plug-ins we can focus on some of the things that can go wrong with the update process – and what to do about them.

Plug-in conflicts

One of the most common issues that occur when updating WordPress files, involves plug-in conflicts.

Most plug-in developers work hard to ensure their plug-ins are always compatible with the latest version of WordPress, but bugs can occur. Since the errors can affect the site as a whole, it is not always easy to work out which plug-in is responsible for a problem, especially if the issue occurred following a WordPress core files or theme update.

Trial and error is usually the best method for determining which plug-ins are to blame. To do this, go to the Plugins page and deactivate all plug-ins. Activate each plug-in individually until you experience the problem.

Once you’ve identified the rogue plug-in, you can either replace it with a different plug-in or reach out to the support team associated with that plug-in.

Outdated/obsolete plug-ins

This is related to the previous issue. Some plug-ins are abandoned by their developers. As time goes by, the chance of incompatibility with later theme and WordPress updates will increase. Since outdated plug-ins may have unattended security vulnerabilities, it is usually best to find a similar alternative.

Plug-ins may also become obsolete. The features they provide may no longer be relevant to a modern website, or they may since have been added natively to WordPress core files.

Lost theme modifications

If you, or your web developer, have made custom alterations to the code in your themes, these will be over-ridden by theme updates.

The solution to this is to create ‘child themes’ based off of the original theme. For help with this, speak to your web developer.

Too many updates

You might come across a rare issue whereby the same update has been initiated multiple times. If you get a warning telling you that an update is already in progress, simply try again later. This time lock is built in to WordPress to avoid file corruption.

Admin lock out

This issue is rarer still but is worth us including because of the stress it can cause. Some plug-in updates can cause you to be locked out of your website’s admin dashboard. The easiest solution to this is for your web developer to edit your WordPress configuration files directly on the server where your website is hosted.

Have we whetted your appetite?

Once you’ve mastered applying updates, you might want to explore some of the other functions built in to your WordPress website.

Our non-technical WordPress Training Courses are ideal for helping business owners and admins to master the running of their own websites, reducing the need for outsourcing support.

To benefit from time with a Vu WordPress whizz, visit our course page and contact us to book your spot.

Do you know anyone who may be interested in this project?

Click to share:

WordPress Course

WordPress Course

Our in-person WordPress course is designed for Devon small business delegates with little or no experience of managing content on WordPress websites. It’s a non-technical course and no knowledge of code writing is required.

WordPress Website Design

We are WordPress website design specialists delivering SEO optimised, customer centric WordPress applications for businesses owners, SMEs, not for profit, and digital marketing teams across Devon, the south west and the UK.

WordPress Website Design Company

Ecommerce & Woocommerce

Turn your WordPress website into a full ecommerce platform with WooCommerce and get the benefit of increased customers and revenue, stock control and a low-cost payment gateway.

Web Hosting

A managed server can offer security as well as an increase in performance (which is a key search ranking factor for google), 100% renewable energy hosting can contribute to your corporate social responsibility credentials.

Eco web hosting