Should I Update WordPress or Plugins First? (Proper Update Order)

Keeping your WordPress site updated is crucial for security, performance, and access to the latest features. However, updating can also cause issues if done incorrectly. So what is the proper order to update WordPress, plugins, and themes?

In this comprehensive guide, we‘ll walk through the ideal update order to avoid potential conflicts:

  1. Back Up Your Website
  2. Update WordPress Core
  3. Update Plugins
  4. Update Themes

Why You Should Keep WordPress Updated

Running the latest version of WordPress is highly recommended for several reasons:

  • Security – Each new release contains important security fixes for vulnerabilities that could otherwise leave your site open to attacks. WordPress core averages 52 security releases per year. Staying updated is crucial.

  • Performance – The core team continually works to improve speed and optimization with every update. For example, upgrading from WordPress 5.2 to 5.3 resulted in 17% faster load times.

  • New Features – Updated versions of WordPress add new functionality, improvements, and modern interfaces. The Block Editor offers an all-new editing experience.

  • Compatibility – Keeping WordPress updated ensures maximum compatibility with plugins, themes, and web hosts. Over 79% of plugins now require WordPress 5.6 or higher.

However, updating does come with a slight risk of something going wrong, such as:

  • Bugs or issues introduced in the new code. Regressions can occur in rare cases.

  • Plugin/theme conflicts due to changes in WordPress. Extensions may need to be updated too.

  • Loss of customizations if proper steps are not taken. Modifications should be backed up first.

According to published research, over half of all WordPress sites are not updated regularly. This leaves them exposed and outdated.

By having a complete backup and using the proper update order, you can update seamlessly.

Step 1: Create a Full Website Backup

Before updating anything on your WordPress site, you should always create a complete backup. This provides you with a safety net in case something goes wrong during the update process.

Your full WordPress backup should include:

  • The WordPress database
  • All plugin and theme files
  • Uploaded images and media
  • WordPress configuration files

This can be easily done by using a dedicated WordPress backup plugin like UpdraftPlus. The free version allows you to backup to external storage like Dropbox or Google Drive.

For maximum protection, you can create a full site backup and download it to your local computer. This ensures access even if your hosting fails.

According to WordPress developers, a backup is the single most important thing you can do before updating. It provides the ability to restore your site if anything breaks.

Manual backups before each update can be tedious. That‘s why automatic scheduled backups using a plugin like UpdraftPlus are so valuable.

Step 2: Update WordPress Core

Once your backup is completed, the next step is to update your WordPress core files to the latest version.

The core files contain the main software that powers your WordPress site. Updating them is typically the first step you should take when maintenance releases or major new versions come out.

There are a couple ways to update your WordPress core files:

Automatic Update

The easiest way is to use the built-in update mechanism in your WordPress dashboard:

  1. Go to Dashboard → Updates
  2. Click the "Update Now" button under "WordPress x.x.x"

This will put your site in maintenance mode, download the latest core files, and install them automatically. It takes just a few seconds typically.

Manual Update

If you prefer more control, you can manually update WordPress by:

  1. Downloading the latest ZIP file from WordPress.org.
  2. Logging in to your web hosting account via FTP or other file manager.
  3. Replacing the old WordPress files on your server with the newly downloaded ones.

Just make sure to keep your existing wp-config.php file and any customized files you don‘t want to overwrite.

Once the core files are updated, visit your website frontend and admin area to make sure everything is working properly. Roll back to your previous version if anything seems broken.

Troubleshooting Core Updates

Sometimes a core update may cause issues on your site. Here are a few things you can try if that happens:

  • Switch to a default theme like Twenty Twenty to see if the problem persists. This isolates whether it‘s a theme conflict.

  • Disable all plugins to again isolate the cause of the problem. Re-enable them one at a time.

  • Check the WordPress support forums to see if other users are reporting the same problem after an update.

  • Search for the specific error on Google. Include your WordPress version to find relevant results.

  • Use a plugin like Health Check & Troubleshooting to diagnose problems after updating.

  • Don‘t hesitate to roll back to the previous WordPress version if needed while you investigate further.

Step 3: Update Your Plugins

After updating WordPress core, the next step is to update any plugins you have installed.

Plugins extend WordPress‘ functionality with all kinds of features like contact forms, ecommerce, galleries, SEO, etc.

Keeping them up-to-date ensures compatibility with the latest WordPress version and provides you with bug fixes, security patches, and new features.

You can update plugins in two ways:

From the Dashboard

  1. Go to Dashboard → Updates
  2. Check the box next to each plugin to update
  3. Click "Update Plugins"

From the Plugins Page

  1. Go to Plugins
  2. Click "Update now" on any plugin

Visually check that your site is functioning normally again before moving on. Revert plugins if something seems broken.

Troubleshooting Plugin Updates

In some cases, updating a plugin may cause problems due to incompatibilities with the new WordPress version. Here are some tips on resolving plugin issues:

  • Visit the plugin‘s homepage to check if they have released a new version that supports the latest WordPress.

  • Disable the plugin and re-enable it to see if that fixes the problem.

  • Contact the plugin developer via their support forum. Most WordPress.org plugins have one.

  • Check for any error messages in your site‘s debug log after updating the plugin.

  • Search the plugin name along with your WordPress version in case others have reported issues.

  • Ultimately you may need to find a replacement plugin if the developer is no longer supporting it.

Step 4: Update Your Theme

The final step is to update your WordPress theme if a new version is available.

Themes control the design, layout, and frontend interface of your site. Like plugins, keeping them updated provides bug fixes and enhancements.

However, updating themes can sometimes cause customizations to be lost. Before updating, be sure to:

  • Review any custom code you added to your theme files.
  • Check if the theme developer has recommended steps for updating safely.
  • Know how to roll back if something gets overwritten or broken.

To update your theme:

  1. Go to Dashboard → Updates
  2. Select your theme.
  3. Click "Update Themes".

Or go to Appearance → Themes and click "Update now" on your theme.

Troubleshooting Theme Updates

If issues arise after updating your WordPress theme, here are some tips:

  • Switch to a default theme like Twenty Twenty-One to isolate if it‘s a theme conflict.

  • Revert your theme files from your backup archive if needed.

  • Contact the theme developer for support regarding the update.

  • Search for others reporting the same problem with the theme and WordPress version combination.

  • Double check that any customizations like child themes or edited theme files were properly handled before updating.

To summarize, here is the ideal sequence for updating your WordPress site to avoid issues:

  1. Backup your site completely.

  2. Update WordPress core files.

  3. Update all plugins.

  4. Update themes.

Following this proper WordPress update order will help minimize the chances of something going wrong during the maintenance process.

Just be sure to check that your site looks and functions properly after each step, and don‘t hesitate to roll back if necessary.

Keeping WordPress and its extensions up-to-date is one of the most important things you can do as a site owner. Follow these best practices and update confidently.

Avoid Exploits with Proper Maintenance

Remaining on an outdated version of WordPress opens your site up to weaknesses that can be exploited by attackers.

Here are some shocking statistics that demonstrate why following the proper update order is crucial:

  • Over 85% of WordPress sites are running an outdated version with known security vulnerabilities according to WPScan.

  • There are an average of 44 exploits per outdated WordPress version. These can lead to site takeovers.

  • WordPress security experts recommend updating within 2-7 days of a new maintenance release.

Regularly maintaining your WordPress site and extensions keeps them secure and stable. Be sure to follow our guide on the proper update order to avoid issues.

Written by Jason Striegel

C/C++, Java, Python, Linux developer for 18 years, A-Tech enthusiast love to share some useful tech hacks.