WordPress updates explained
Understand what WordPress updates are, what the different types mean, and how the update process works.
Your WordPress dashboard sometimes shows a number badge on the "Updates" menu item. This guide explains what those updates are, why they exist, and what you're looking at when you see them.
Quick summary
WordPress has three types of updates: core (WordPress itself), plugins (add-ons), and themes (your site's visual design). All three need to be kept current for security and stability. Most can be applied from Dashboard → Updates.
The three types of WordPress updates
WordPress core updates
These are updates to WordPress itself — the central software that runs your entire site.
- Major releases (e.g., 6.4 → 6.5) bring new features and significant changes. They happen a few times per year.
- Minor releases (e.g., 6.5.0 → 6.5.1) fix bugs and security issues. These should be applied quickly.
- Security releases are the most urgent. They patch specific vulnerabilities and should be applied as soon as possible.
WordPress sometimes applies minor and security releases automatically in the background. Major releases usually require a manual click.
Plugin updates
Plugins (the add-ons that power your forms, store, SEO tools, etc.) are updated by their developers independently of WordPress core. Each plugin update could fix bugs, add features, or patch security vulnerabilities.
You may see many plugin updates available at once — that's normal. See How to update plugins safely for the right approach.
Theme updates
Your theme controls the visual design of your site. Theme updates may fix bugs, add new options, or address security issues. Like plugins, they're updated separately.
Custom themes work differently
If Chykalophia built a custom theme for your site, it won't appear in your theme updates list — we maintain it separately. Don't delete or overwrite your custom theme.
Where to find updates
In your WordPress dashboard, click Dashboard → Updates in the left sidebar. This page shows everything waiting for an update: WordPress core, plugins, and themes.
You can also see plugin-specific update notices at Plugins → Installed Plugins — a yellow notice appears under each outdated plugin.
Automatic updates
WordPress handles some updates automatically without you doing anything:
- Security patches for WordPress core are applied automatically by default.
- Minor releases are typically applied automatically too.
- Major releases and plugin updates are not automatic by default, though they can be enabled.
Some managed hosting providers (like WP Engine, Flywheel, or Kinsta) also apply updates on your behalf as part of their service.
What could go wrong?
Updates very occasionally cause problems — usually because a plugin isn't yet compatible with a new WordPress version, or two plugins conflict after an update.
This is why we recommend:
- Always having a recent backup before updating
- Testing on a staging site for major updates
- Checking your site after every update
The full checklist is in What to do before a big update.
When you're on a Chykalophia care plan
If we manage your website, updates are part of your plan. We monitor for available updates, test them on a staging environment when warranted, and apply them to your live site. You don't need to do this yourself.
If you're not on a care plan and manage updates yourself, read How to update plugins safely and Why updates matter for guidance.
Common questions
Related guides
- Why updates matter
- What to do before a big update
- How to update plugins safely
- How WordPress backups work
- WordPress security basics
Need a hand?
Learn more
Comments & discussion settings
Learn how to configure WordPress comment and discussion settings, including moderation, spam control, and notification preferences.
Why updates matter
Learn why keeping WordPress, plugins, and themes updated is essential for your site's security, stability, and performance.