New 24/7 monitoring and daily cloud backups now included in every Shield Pro plan.

Plugins

How to update WordPress plugins safely

Plugin updates patch security holes but also ship code that can conflict with your theme or PHP version. This tutorial shows a repeatable workflow so you update with a restore path, not blind hope.

Time: 20-35 minutes Level: Beginner

What this problem looks like

The WordPress dashboard makes bulk updates tempting. On a live shop or membership site, bulk updates hide which plugin broke checkout or login. A safe update routine treats each plugin as a small deployment with a backup and a quick test pass.

Staging copies, maintenance mode, and WP-CLI give you faster rollback than guessing which of twelve plugins failed. The steps below work whether you manage one site or twenty client sites.

Never run bulk plugin updates on production without a recent backup. One incompatible release can take wp-admin offline instantly.

Prepare before you click Update

Open your hosting panel and confirm you have a backup from today or create one with your backup plugin, host snapshot tool, or a manual export.

Note your active theme, PHP version, and any plugins tied to payments or membership. Those deserve extra caution or a staging test first.

  • Export or snapshot the database.
  • Download wp-content/plugins via SFTP if you lack automated backups.
  • Disable auto-updates on WooCommerce, membership, and page builder plugins until tested.

Update from wp-admin

Log in as an administrator and go to Dashboard → Updates or Plugins → Installed Plugins.

Update one plugin, then load the front end and wp-admin in a private browser window before continuing.

  1. Click Update Now on a single plugin.
  2. Wait for the success message.
  3. Test homepage, one inner page, and any form or cart flow.
  4. Repeat for the next plugin.

Update with WP-CLI on SSH

Servers with SSH and WP-CLI let you update from the command line and script the process for multiple sites.

bash
cd /path/to/wordpress
wp plugin list --update=available
wp plugin update contact-form-7
wp plugin update woocommerce --version=8.6.1
Pin a specific version with --version when a vendor documents a bad release. Remove the pin after a fixed version ships.

Use staging for risky plugins

Page builders, SEO suites, and custom CRM connectors often break layouts after updates. Clone the site to staging, run the update there, and click through real content before touching production.

If staging is not available, schedule updates during low traffic and keep FTP access open so you can rename a plugin folder quickly.

When an update breaks the site

If wp-admin dies after an update, rename the plugin folder via SFTP or restore the plugin folder from backup. See our rollback tutorial for version-specific recovery.

Leave the plugin deactivated until the vendor ships a fix or you can test on staging.

When to stop DIY and hire help

If plugin updates keep breaking production and you cannot maintain staging, BugShield offers fixed-price plugin conflict fixes from £49.99 with a BugShield developer and secure Vault access for wp-admin and hosting.

FAQs

Should I enable automatic plugin updates?

WordPress can auto-update minor releases for directory plugins. Turn that off for WooCommerce, LMS, and builder plugins until you test updates on staging or during a maintenance window.

Why does Update fail with a filesystem error?

WordPress needs write access to wp-content/plugins. Fix folder ownership with your host or install via SFTP instead of the dashboard uploader.

Can I skip plugin updates?

Outdated plugins are a top hack vector. Skipping updates trades short calm for security risk. Update on a schedule with backups instead of ignoring notices.

Do I need to update inactive plugins?

Yes. Inactive plugin code still loads on some hosts and remains exploitable. Update or delete plugins you no longer use.

Rather someone else fixed it?

Request a fix at a confirmed price. Named UK developer, secure Vault, direct chat.

Request a Fix