It’s a valid question—and one I get often. So I decided to reply in detail, and while I’m at it, I figured it’s a good time to write a blog post about what we actually do during a CMS update. Specifically, what we do to ensure our WordPress websites are updated, secure, and optimized—even if we’re only doing it once a year.
How We Maintain and Update WordPress Websites on Shared Hosting (Once a Year)
Ideally, if it was up to me, we would be updating websites hosted on our servers monthly. But because we have a lot of small business clients—and because of budget limitations—we only require updates once a year. Obviously, our bigger clients get updates more frequently and usually have their own server environments. But our smaller clients, who are hosted in our shared server, are required to get website updates once per year.
Here are the steps of what we do to ensure our shared server space is secure and optimized for all clients:
- Pre-Update Backups & Audit
Before making any updates, we take a full backup of the website—both files and database. We store at least two copies: one on a local device and another on secure cloud storage. We also do a quick audit to check the current WordPress version, PHP version, theme, and plugins. This helps us identify any compatibility issues before we begin.
We also run a speed test using GTmetrix or Lighthouse and document the current functionality of the site—this includes checking the homepage, forms, navigation, login, and anything custom.
- Updating WordPress Core
Next, we update the WordPress core to the latest stable version. We always check compatibility with the site’s PHP version and theme/plugin stack. If we anticipate issues, we test the update in a staging environment first. After the core update, we test the admin dashboard, page/post editing, and media uploads to make sure everything is still working smoothly.
- Plugin and Theme Updates
We update all active plugins and replace any deprecated or unsupported ones. For themes, especially child themes with custom code, we manually review changes before applying them.
Once everything’s updated, we test key parts of the website like contact forms, booking systems, navigation menus, and any interactive features. If it breaks, we fix it. If it’s obsolete, we recommend alternatives.
