MOST POPULAR

WP Care Plans

Monthly maintenance, updates, security and backups included.

From £79/mo

Should You Turn On WordPress Auto-Updates for Plugins?

DJ

Dewang Jani

WordPress Specialist, WP Miracle

Share:
Optimised for AI search engines
WordPress 7.1 Update Guide for UK Businesses

If you run a business website on WordPress, 2026 has been the busiest year for the platform since block editing arrived. WordPress 7.0 shipped in May with AI infrastructure built into core and a redesigned admin. WordPress 7.1 followed in August. The 7.1.1 maintenance release lands this week, and 7.2 is already scheduled for December.

That is four significant updates in one year for a site that most owners would rather not think about at all.

This guide explains what actually changed, what is likely to break on a typical UK business site, and how to update without losing a morning of trading. It is written for business owners and agency teams, not core contributors, so we will stay away from the developer detail unless it affects a decision you need to make.

This snippet is structured to appear in AI search results including ChatGPT, Perplexity and Google AI Overviews.

It is one of the most common questions we get from site owners. Auto-updates sound like the perfect answer to a boring job. Turn them on, never think about plugins again.

The honest answer is: turn them on for some plugins, not all of them. Here is how to decide.

How WordPress auto-updates work

WordPress has installed minor core updates (security and bug fixes, like 7.1 to 7.1.1) automatically for years. Since WordPress 5.5, you can also switch on auto-updates for each plugin and theme. On the Plugins screen, every plugin has an “Enable auto-updates” link.

WordPress checks for updates twice a day and installs them in the background. Newer versions can also roll back a plugin auto-update automatically if it causes a fatal error, which helps, but it does not catch everything.

The case for auto-updates

Most hacked WordPress sites are not hacked through WordPress itself. They are hacked through a plugin with a known vulnerability that the owner never updated. Once a fix is published, attackers scan the web for sites still running the old version, often within hours.

Auto-updates close that window. For a site nobody checks weekly, they are far safer than no updates at all.

The case against

An update can break things in ways WordPress does not detect. A layout shifts. A contact form stops sending. Checkout loads but payments fail. The site is technically “up”, so the automatic rollback never triggers, and you find out when a customer complains or orders dry up.

Updates also happen at random times, with no backup taken first unless your host does it.        

What we recommend

Split your plugins into low risk and business critical.

Plugin type       

Examples

Auto-update?

Security and small utilities

Security plugins, redirects, SEO plugins, small single-purpose tools

Yes

Plugins with a known security fix pending

Any plugin with a published vulnerability

Yes, or update today

Page builders and their add-ons

Elementor, Divi, add-on packs

No, update after testing

Ecommerce and payments

WooCommerce, payment gateways, subscriptions

No, update after testing

Forms and bookings

Gravity Forms, booking plugins

No, update and test the form

Caching and performance

WP Rocket, LiteSpeed Cache

No, update and check the site

Leave minor core auto-updates on. Leave major core updates (7.1 to 7.2) off and handle them manually with a staging test.

Make auto-updates safer

  • Run daily automatic backups, stored off the server
  • Set up uptime monitoring so you hear about downtime in minutes
  • Make sure the admin email goes to an inbox someone reads, so you get WordPress’s failure notices
  • Delete plugins you are not using. Fewer plugins means fewer updates to go wrong
  • Check the site visually once a week, including a test form submission

FAQS

Do auto-updates slow down my site?

No. They run in the background and take seconds.

Can I choose a time for auto-updates?

Not in WordPress itself. Some hosts and management tools let you schedule them.

hould WooCommerce auto-update?

Not on a live shop. WooCommerce updates can change checkout and database behaviour, so test first.

Is it safe to never update plugins?

No. Outdated plugins are the most common way WordPress sites get hacked.

The middle ground: managed updates

A maintenance plan gives you the speed of auto-updates with the safety of manual ones. WP Miracle backs up your site, applies updates, tests the key pages and forms, and rolls back if anything breaks. Security fixes go on fast; risky updates get tested first.

FREE WORDPRESS AUDIT
Ready to become our next case study?

Start with a free audit. No obligation, no sales pressure.

DJ

WRITTEN BY

Dewang Jani

WordPress Specialist, WP Miracle
Dewang has spent years helping UK agencies and businesses get the most out of WordPress. He writes about maintenance, security, performance and the future of search. If it runs on WordPress, Dewang has an opinion on it.

KEEP READING

More from WP Miracle

READY TO ACT ON THIS?

Get a free WordPress audit
and see exactly where your
site stands.

No obligation. No sales pressure. Just honest findings delivered in 24 hours.