Safe Practices for Installing WordPress Plugin, Theme and Core Updates to Your Website

by | Jun 5, 2022 | Technical Help, WordPress

Since I started CharlesWorks in 1998, it has been abundantly clear as a web developer that there are two types of web clients when it comes to site maintenance:

  • Those who want us to do any maintenance needed as they need it
  • Those who want to try to maintain their sites on their own as much as possible


For many, many years now we at CharlesWorks have been building sites using WordPress. It is my recommended website platform. At the time of this writing, about 40% of all websites – over 455,000,000 sites – yes, that’s 455 million sites – on the planet are using WordPress. It has been considered to be the most popular CMS (Content Management System – a type of website in which the user can manage the content) since about 2016.

If you have a WordPress website and want to perform certain maintenance functions – as well as the updating of your website’s content yourself – CharlesWorks can make it possible for you to accomplish these on your own.

We can even provide personalized training for you at our standard webwork pricing rate. Bear in mind that when we are training you, we are not working performing webwork on other websites that is billable time. Also bear in mind that we can’t make you into an expert web developer in an hour or two. But you can certainly learn how to manage your site and save development and maintenance dollars – especially if you do it regularly. There is a learning curve and we’ve seen many who just don’t get in to the WordPress dashboard enough to get good at it.

WordPress Updates

One of the questions we are often asked is how to get in the WordPress dashboard (where you end up when you first log into the back end of the WordPress site) to even know whether there are updates needing to be done. If you have forgotten how to get in the dashboard, please check out our Basic WordPress Login Instructions first.

Once logged into te Dashboard, mousing over the word Dashboard will display Home and Updates in the relatively up to date versions of WordPress. Usually, if there are theme, plugin or WordPress core updates needed, there will usually be an indication of the cumulative number of them there, Clicking on Updates will bring you to the relatively self-explanatory updates dashboard page.

A WordPress site may have both active and inactive plugins and themes. ALL of the site’s plugins, its themes, and its WordPress core itself should be kept up to date. Each can present website security issues as hacker entry points are discovered. Therefore, all updatable plugins, themes and the core should be kept updated.

Removing unused themes or plugins is also the best security policy as well. Such unused items use up your website’s hosting space, cause backups to take longer, and still present security risks simply being there. However, be careful when removing themes to not remove the parent theme if you are using a child theme. And WordPress likes to have one of its basic themes present in case of an issue with the current parent theme.

To see the state of the site there is a built in function called Site Health. You can see that in the WordPress dashboard by navigating to Options > Site Health. If you have inactive themes or plugins, the WordPress Site Health page will tell you so.

When to Update

Most of the time, people go into the WordPress Dashboard because they wanted to make a content change to their site. Then when logged into the Dashboard they notice the updates. So, hopefully you understand now to just update everything that needs updating. This will greatly reduce your chances of getting hacked.

Another important thing to understand that I highly recommend is that you perform the updates FIRST. Do your updating BEFORE you start making any modifications or changes to the site.

The safest way is to do updates is individually (meaning one plugin or theme at a time). It can reduce troubleshooting time to perform the update on each item needing an update one at a time as opposed to updating several all at once if several need updating. That way, if something goes wrong (which is actually extremely rare) and the site goes away or doesn’t seem to work properly and needs to be restored, you will have a better idea of (and can just tell us) what you think blew it up so we can restore it to its working state before you started doing updates. Plus, you won’t have lost any of webwork this way.

As a side note, you must always bear in mind that many thousands of developers work on integrating plugins and themes with the WordPress core. Plugins and themes have to play well not only with WordPress but with each other. In those rare instances where an update caused an issue, in some cases I was able to get updates installed by changing the order in which I applied them. It doesn’t always work, but worth the security peace of mind by trying – especially if you have a backup of the site.

Once your updates are all installed and the site appears to be working you can proceed to make the edits or changes you intended to.


While it seems like a lot of steps in this article, the entire process of updating your site really takes little time to accomplish. Believe me when I tell you that you want to avoid having to recover or clean up a hacked site – and updating is great preventative maintenance!

CLICK HERE to find your domain name!   CLICK HERE to transfer your domain name!



24 hour (1) Accessibility (2) Accounting (1) Advertising (15) AdWare (1) Alex Johnson (2) Alignment (1) Android (2) Anti-Virus (1) Antivirus (1) Antrim Computer Repair and Service (3) APC Back-UPS (1) Appearance (2) Apple Mail (4) Apple Mobile Mail (2) Attachments (1) Audit (1) Authorized (1) Autoresponder (5) Availability (1) Backups (1) Badges (3) Bank Account (1) Bank Statement (1) Battery Backup (2) Better Business Bureau (3) Bob Hill (1) Bookkeeper (1) Branding (8) Budget (2) Business (26) Business Management (1) Catalog (1) Categories (1) Charles Oropallo (1) CharlesWorks (42) Cherryl Jensen (1) Chrome (1) Cloud (1) Code (2) Communicating (1) Competition (1) Computer (2) Computer Cache (1) Computer Hardware (1) Computer Security (2) Constant Contact (1) Consultation (1) Contact Information (2) Content (1) Content Management (33) Content Management System (1) Copiers (1) Copy Machine (1) Coronavirus (2) Courteous (1) COVID-19 (3) Credibility (9) Credit Card (1) Credit Card Processing (1) CSS (9) Customer Service (2) Database (1) Debian (1) Design (45) Design Expertise (1) Desktop (1) Dialup (1) DirectAdmin (4) Directions (1) DIVI (7) DNS (2) Do-it-Yourself (1) Documentation (1) Domains (18) Domain Transfers (5) E-Commerce (1) ecommerce (1) Elementor (1) Email (63) Email Lists (4) Email Management (2) Email marketing (3) Etiquette (3) Eudora 6 (1) Exchange (1) Expanding (1) Facebook (1) Financial (1) Finish (1) Firefox (1) Fonts (1) Forms (2) Forms Protection (1) Fraud (2) Galaxy S4 (1) General Info (1) Gmail (1) GoDaddy (1) Google (1) Google Adwords Certified Partner (1) Google Chrome (2) Groups (1) Happy Holidays (1) Hardware Help (1) Hill Specialty Networks (1) Hosting (1) Images (1) IMAP (1) include (1) Infected (1) Information (32) insert pages (1) install (1) Internet Browsing Errors (1) Internet Consultant (1) Internet Explorer (1) Joomla! (1) Keywords (2) Laptop (1) Legibility (1) Linux (9) Logging on (1) Macintosh (1) Mail 6.0 (1) Mail 2011 (2) Make-Over (1) Malicious (1) Malware (1) Marketing (8) Matt Burke (3) MDaemon (3) MelbourneIT (2) menu (1) Merchant (1) meta (1) Microsoft (1) Microsoft Edge (1) Microsoft Hosted Exchange (5) Microsoft Live (2) Mobile Email Setup (1) Monadnock Region (1) Mozilla Firefox (2) MySQL (1) Nathan Wesley (1) Netscape (1) Netscape Messenger (1) Office Copiers (1) OfficeLive (1) Online (1) Outlook (9) Outlook 2010 (2) Outlook Express (1) PayPal (1) Pay Per Click (2) PC (1) Personal (1) Peter Harris (1) Peter Harris Creative (1) Phishing (2) PHP (3) pixel (1) plugins (1) Pop Email (1) Popularity (1) Portfolio (1) Power Grid Failure (1) PPC (1) Prevent Fraud (1) Privacy (1) Private (1) Product (6) products (1) Professional (5) Projects (2) Protect (1) Protection (1) QR codes (1) Quality (2) QuickBooks (1) Reconciliation (1) Reduce Risk (1) Register (1) Reliability (2) Renew (1) Reseller (2) Resolution (1) Restrict User Access (1) Results (1) Review (2) Risk (1) Robin Snow (1) Roundcube (1) Safe (1) Samsung (2) Scam (16) Scammer (16) Search (1) Search and Replace (1) Search Engine Optimization (SEO) (20) Security (24) Security Risk (1) Selling (1) Servers (2) Service (11) Shopping Cart (1) Site (1) SmarterMail (9) Social Engineering (1) Social Networking (1) Software (1) Solutions for Today (1) Spam (1) Spam Filtering (15) Spammer (1) Spyware (2) SquirrelMail (1) SSL (8) Statistics (2) Stats (2) Stone Pond Technology (1) Storage (1) Support (1) Tablet (1) Target Market (1) Technical Help (1) Testimonials (9) The CW Corner (1) Thom Little (1) Thom Little Associates (1) Thunderbird (3) Thunderbird 10 (2) TLD (1) Topic (1) Top Level Domains (3) Transaction (2) Transfer Data (1) Transfer Funds (1) Typography (1) Update (2) Uploading (1) UPS System (2) Up to Date (1) Virus (2) Viruses (1) Vista (1) Web (1) Web-Over (1) Web Development (99) Web Hoster (1) Web Hosting (2) Web Hosting Company (1) Web Mail (1) Webmail (8) Webmaster (10) Web Presence (26) Website (110) Website Development (1) websites (2) Web Stats (1) Web terms (1) Web Writing (1) Windows 7 (2) Windows Mail (6) Windows XP (1) WooCommerce (5) WordPress (88) WordPress Updates (1) Working Remote (2) Writing (1) YouTube (1)
Protected by CleanTalk Anti-Spam