The single most important measure.
WHAT AN UPDATE FREQUENTLY CONTAINS
A fix for a known vulnerability.
WHAT HAPPENS WHEN ONE IS PUBLISHED
The vulnerability becomes public.
Attackers scan for sites running the vulnerable version, automatically, within hours.
WHAT THAT MEANS
An unupdated site is not merely at risk. It is actively being searched for.
WHAT TO UPDATE
Core software Plugins Themes Any other application on your account
THE RISK OF UPDATING
Something breaks.
Real, and far smaller than the risk of not updating.
HOW TO MANAGE THAT RISK
Back up first Test on staging for anything significant Update, then check the site
WHAT NOT TO DO
Delay updates for months because you fear breakage.
That accumulates risk.
WHAT TO AUTOMATE
Security updates, for a simple site with backups.
WHAT TO DO MANUALLY
Major updates on a shop or complex site.
