WordPress updates explained
Understand what WordPress updates are, what the different types mean, and how the update process works.
- Difficulty
- Beginner
Your WordPress dashboard sometimes shows a number badge on the "Updates" menu item. This guide explains what those updates are, why they exist, and what you're looking at when you see them.
Quick summary
WordPress has three main types of updates: core (WordPress itself), plugins (add-ons), and themes (your site's visual design). All three need to be kept current for security and stability. Most can be applied from Dashboard → Updates, which also lists translation updates.
The three types of WordPress updates
WordPress core updates
These are updates to WordPress itself — the central software that runs your entire site.
- Major releases (e.g., 7.0 → 7.1) bring new features and significant changes. They happen a few times per year.
- Minor releases (e.g., 7.0 → 7.0.1) are maintenance and security releases that fix bugs and security issues. These should be applied quickly.
- Security releases are minor releases that patch specific vulnerabilities. They are the most urgent and should be applied as soon as possible.
By default, WordPress applies minor (maintenance and security) releases automatically in the background. Whether major releases also install automatically depends on the site: sites installed on WordPress 5.6 or later do this by default, while older sites need someone to switch it on (or to click the update themselves).
Plugin updates
Plugins (the add-ons that power your forms, store, SEO tools, etc.) are updated by their developers independently of WordPress core. Each plugin update could fix bugs, add features, or patch security vulnerabilities.
You may see many plugin updates available at once — that's normal. See How to update plugins safely for the right approach.
Theme updates
Your theme controls the visual design of your site. Theme updates may fix bugs, add new options, or address security issues. Like plugins, they're updated separately.
Custom themes work differently
If Chykalophia built a custom theme for your site, it won't appear in your theme updates list — we maintain it separately. Don't delete or overwrite your custom theme.
Where to find updates
In your WordPress dashboard, click Dashboard → Updates in the left sidebar. This page shows everything waiting for an update: WordPress core, plugins, and themes.
You can also see plugin-specific update notices at Plugins → Installed Plugins — a "There is a new version of … available" notice appears under each plugin that has an update.
Automatic updates
WordPress handles some updates automatically without you doing anything:
- Security patches for WordPress core are applied automatically by default.
- Minor releases are applied automatically by default too.
- Major releases install automatically by default only on sites first installed with WordPress 5.6 or later. On older sites, they need to be switched on.
- Plugin and theme updates are not automatic by default. An administrator can switch on auto-updates one plugin or theme at a time.
Some managed hosting providers also apply updates on your behalf. WP Engine and Flywheel, for example, update WordPress core on their customers' sites automatically, and Kinsta offers an Automatic Updates service. Check what your hosting plan includes.
What could go wrong?
Updates very occasionally cause problems — usually because a plugin isn't yet compatible with a new WordPress version, or two plugins conflict after an update.
This is why we recommend:
- Always having a recent backup before updating
- Testing on a staging site for major updates
- Checking your site after every update
The full checklist is in What to do before a big update.
When you're on a Chykalophia care plan
If we manage your website, updates are part of your plan. We monitor for available updates, test them on a staging environment when warranted, and apply them to your live site. You don't need to do this yourself.
If you're not on a care plan and manage updates yourself, read How to update plugins safely and Why updates matter for guidance.
Common questions
How often should I update?
Security-related updates — apply as soon as possible. Other updates — at least once a month is a good rhythm. Leaving updates weeks or months behind creates increasing security risk.
What does 'WordPress X.X.X is available' mean?
A new version of WordPress core is ready to install. A notice at the top of your admin screens reads "WordPress X.X is available! Please update now." The Please update now link takes you to the Dashboard → Updates screen, where you can run the update. (If your account can't update WordPress, the notice asks you to notify the site administrator instead.)
Do I need to back up before every update?
Yes, ideally — especially for major version updates or big plugin updates. A recent backup lets you restore quickly if anything goes wrong. See How WordPress backups work.
My site broke after an update — what do I do?
First, try deactivating recently updated plugins one by one to isolate the problem. If the site is completely inaccessible, contact us and we'll restore from backup. See My layout broke after an update.
Related guides
- Why updates matter
- What to do before a big update
- How to update plugins safely
- How WordPress backups work
- WordPress security basics
- My layout broke after an update
Need a hand?
Learn more
Last updated