One of the easiest and cheapest ways to reduce the security risk to your WordPress website is to ensure that your site software is up-to-date. A WordPress website uses WordPress software, theme software and plugin software. All of these components are need to be updated at some time or another. Updates add new features, close security holes and often improve performance. Without updates your website is vulnerable to abuse, potentially to your business detriment. It is so important you keep your site software up to date.
Fortunately this is fairly easy and possible for the DIY website owner.
Do It Yourself
- Log into your website using your administrator account. Once logged in look at the black bar at the top of the page. If you see a label indicating updates, make a backup before you do anything else then go on. If not, you can log out.
- Backups are made in your hosting control panel (cPanel). In a new tab open your cPanel account, go the Files section and click on Backups. Make a backup for your home directory files and your database and download them to a secure location where you can find them again if needed.
- Once your backups are done you can click on the update link and see what updates your website requires. The correct and cautious method is to make each individual update one at a time and check your site in between each to see if it is still working OK. Not all updates work first time and not all updates behave well together. The one at a time approach helps you identify any particular element that causes trouble. A more cavalier approach is to update WordPress, then update all your plugins at once and then all your templates at once. 9 times out of 10 this works fine, but if it doesn’t you will need to update your backups and install updates again, one by one, to find the culprit.
- When all your updates are made your website is good to go. Be sure to check in regularly to look for updates.
Check out this WordPress Update video to learn how it’s done.
Updates Done for You
If you would rather have your updates done for you, clickonit can take care of that for you with WP-Guardian or WP-Guardian Plus. These packages provide a complete security services for your website and email services that include update, monitoring, protection and backup services. Best of all there is absolutely nothing you need to do to ensure daily security and performance service.