#

Wordpress

Subscribe
Wordpress October 29, 2026·9 min read

WordPress Maintenance: Updates, Backups, Restores, and Migration

Pick the task first, make sure you can recover the site, then check that everything works after the change. If your site takes live orders, restoring an old backup can erase newer ones, so plan for that before any risky step. Use the table below to find your guide.

Choose the WordPress maintenance task that matches your problem

WordPress maintenance routes

Start with what triggered the work. Routine checks, software changes, a server move, and a broken site each call for a different procedure. Find your situation in the table, then follow the guide it points to.

What's happeningFirst decisionWhere to go
The site is working and upkeep is duePick checks that fit how active the site isMaintenance rhythm
WordPress core, a plugin, a theme, or PHP needs updatingDecide how much testing the change needsUpdate strategy, then the WordPress updates guide
You need a recovery copyDecide what to capture and how you will restore itBackup readiness, then the WordPress backup guide
You need to recover an earlier site stateCheck what failed and what a rollback would eraseFix or restore, then the WordPress restore guide
You are moving hosts or changing domainsCheck whether the public domain changesMigration planning, then the WordPress migration guide
Old URLs remain after a domain changeFind where the URLs are stored and limit the replacement scopeStored URLs, then the WP-CLI search-replace guide
Scheduled posts or background jobs are missingFind the scheduled event and check the available diagnosticsScheduled operations, then the WordPress cron guide
The public site is already brokenHandle the outage and live data before any optional maintenanceFailure triage or problem-specific troubleshooting

A backup gives you a recovery copy. Restoring applies an earlier state. Migrating moves the installation to another environment or address.

Maintenance task selection

Before any planned disruptive change, use the backup check below to confirm you can recover the site.

Know what your WordPress host handles and what you still own

WordPress hosting responsibilities

The service and plan set what a host provides, and your account's permissions set what you can do. What counts is who can back up, stage, restore, update, and investigate the installation.

Hosting arrangementWhat to establishLikely division of work
Managed WordPress hostingBackup and restore controls, retention, staging, software updates, and support limitsThe provider handles its services. You handle business functions.
Hosting with a control panelAvailable backup, database, PHP, restore, and diagnostic toolsSplit among you, the host, and the site administrator
Self-managed VPSServer access, site files, database credentials, backup storage, restore method, and logsThe server operator handles it, except for services the contract expressly supplies
Hosting access controls

Open your host's dashboard and support terms. Find out who makes backups, where and how long they are kept, who can restore them, and whether you get staging. Then note who handles updates, PHP changes, and command-line diagnostics, and assign each task to a person or service.

Confirm you have a WordPress backup you can recover from

WordPress backup components

A recovery copy of WordPress needs the site files and the database. A file archive leaves out the database, and the WordPress backup documentation treats the two as distinct parts of recovery.

  • Site files: WordPress code, plugins, themes, uploaded media, and configuration.
  • Database: A matching backup of the site's stored content and configuration.
  • Recovery point: The time of capture and what has changed since.
  • Access: A reachable copy and the permissions or credentials to use it, even if the original host is unavailable.
  • Test restore: A successful controlled restore in staging or another suitable environment. Without one, a documented recovery method.

A brochure site that rarely changes has little new material to recover. A shop taking orders all day accumulates records quickly, so the age of your recovery point matters more.

Backup recovery readiness

Kinsta's documented maintenance routine for its hosting service includes a monthly backup restore test in staging. The test confirms the backup can actually be recovered.

Before a planned risky change, confirm that you have the components, the access, and a restore method that fit your site. If any essential piece is missing or you can't show that a restore would work, postpone optional changes and set up recovery first, using the WordPress backup or restore procedure. If the site is already down, use the available recovery support.

Choose how to update WordPress safely

WordPress update approaches

WordPress core, plugins, themes, and PHP each bring different compatibility changes. Choose your update approach by the functions at risk, the testing controls you have, and who deals with a failure.

Maintainer of personal and business websites, r/Wordpress“Not updating them makes me feel uneasy too, like I'm leaving the door open for security problems.”
Update approachWhere it fitsTrade-off
Automatic updatesSites where you accept automated deployment and have recovery and monitoring in placeLess manual work, but you can't review an individual change before it deploys
Scheduled manual reviewSites with an owner who can promptly assess and install available changesMore control over timing, plus an ongoing review duty
Staging-first deploymentSites with checkout, complex integrations, or other workflows where compatibility testing is valuableRegressions show up before production, at the cost of extra operational effort

An informational site with a simple configuration suits a lighter process. A store with checkout and payment integrations warrants staged testing before deployment.

Plugin update decisions

The WordPress upgrade guidance warns about rollback complications. Installing an older software version can bring compatibility or security concerns, and a version downgrade does not automatically reconstruct the database state from before the change. For the deployment and compatibility steps, see the WordPress updates guide.

Treat a WordPress migration as its own project

WordPress migration planning

A migration moves a WordPress installation to another environment or public address. Files and database travel together, and the cutover also follows the destination configuration and where your domain sends visitors.

  • Same-domain host move: The site moves servers and keeps its public address. The destination environment and the traffic cutover are the key decisions.
  • Domain-changing move: The public address changes too. Stored WordPress links and media references can need changing along with the transfer.

DNS decides where a domain sends visitors. Changing it does not rewrite the addresses stored in WordPress content or settings. That is why a site can load from the new host while individual links still point to the old domain.

WordPress database values can contain serialized data. The official WP-CLI search-replace documentation describes serialized-data-aware replacement and a --dry-run option. You still need the correct target and scope. For execution, see the WP-CLI guide.

WordPress URL migration

A supported migration plugin works where your access and installation requirements allow it. A manual or provider-assisted transfer fits a more customized environment. For method selection and detail, see the migration-tools guide.

In your migration plan, record the source and destination hosts, whether the domain changes, the transfer method, and how you will preview the destination before switching traffic. After the cutover, run the checks in the next section.

Check the parts of the site that can break after a change

WordPress acceptance testing

A homepage can load while important parts of the site stay broken. After an update or migration, test the public pages and the functions your site relies on, such as checkout and forms.

After a move from Bluehost to Hostinger with a changed domain, r/Wordpress“Now my links of images and pdf files are broken on domain B”
AreaPassing resultFailure to investigate
Homepage and key page typesExpected public content loadsMissing pages, content, or templates
AdministrationAn authorized user can reach the required dashboard functionsLogin or admin failure
Navigation and linksRepresentative links reach their intended destinationsOld-domain or broken links
Images and PDFsMedia displays or downloads from the expected locationUnavailable files or outdated media addresses
Forms and emailA controlled submission is accepted and you can confirm receipt or deliverySubmission failure or undelivered messages
Cart and checkout, where usedA controlled purchase flow works as expectedFailure at a critical transaction step
Scheduled tasks, where usedRelevant events complete as expectedMissed posts or background work
Website functional checks

If checkout, an essential form, or another critical function fails, keep diagnosing before you call the change done. Record each test result that applies. Use controlled test records for anything that sends messages or creates transactions.

When a change fails, decide whether to fix or restore

WordPress recovery choices

When a change breaks the site, find out what failed and what you changed. That tells you whether a targeted repair or a broader restore fits.

After updating Yoast SEO on a client ecommerce site, r/Wordpress“Unfortunately after updating Yoast SEO plugin the website crashed and it returned a white screen.”

Restoring an older database can overwrite newer orders, account changes, posts, or submissions.

Some hosts offer selective restoration that keeps the records you specify. The service sets the available controls and how orders or subscriptions are treated.

Compare your most recent usable restore point with the records created afterward. Then choose the focused repair or the restore that keeps the live data your site still needs. For the restore steps, see the WordPress restore guide.

Set a maintenance rhythm without missing scheduled WordPress work

WordPress maintenance schedule

No single daily, weekly, or monthly schedule fits every installation. A static brochure site and an active community or ecommerce site differ in how fast they change and how much data loss they can accept, so set the review interval to match.

  • Recurring review: Check your backups, outstanding software changes, and the installation's operational condition.
  • After substantive changes: Revisit the plan when hosting, software, integrations, or business requirements change materially.
  • When scheduled work is missed: Treat a missed post or background job as a problem to investigate, even when ordinary public pages still work.

Where you have WP-CLI access, its cron event commands show pending events and run them. An event listing shows scheduling information. To confirm that a task finished, use an appropriate diagnostic or check the result.

Scheduled WordPress events

For missing scheduled content, inspect the scheduled event and your host's diagnostic information. Then use the WordPress cron troubleshooting guide to find the underlying cause. Adjust the review frequency as the site changes.

NoScript Team