Keeping WordPress updated is the single most effective way to protect your site from hackers. Most compromised WordPress sites were running outdated software. Here is how to update safely.

Before You Update

• Take a backup first — files and database. In Plesk use Backup & Restore, or use your WP Toolkit backup option.
• Check PHP compatibility — very old plugins may break on newer PHP versions.

Method 1: Update from wp-admin

1. Log in to your WordPress dashboard at yourdomain.com/wp-admin.
2. Go to Dashboard → Updates.
3. Update WordPress core first, then plugins, then themes.
4. After each update, quickly check your site’s front end to confirm nothing broke.

Method 2: Update via Plesk WP Toolkit

1. Log in to Plesk and open WordPress in the left menu.
2. The toolkit lists all your WordPress installs and shows available updates at a glance.
3. Select your site and click Update — the toolkit can update core, plugins, and themes together.

If an Update Breaks Your Site

• Restore the backup you took before updating.
• Or disable the broken plugin by renaming its folder in wp-content/plugins/ via the Plesk File Manager.