How to Check for WordPress Plugin Updates (and Update Safely)

Knowing how to check for WordPress plugin updates keeps your site safe, because most WordPress hacks come through outdated plugins. This guide shows where WordPress lists available updates today, how to update safely, and how the old Update Manager plugin fit into the story.

Quick answer: WordPress checks for plugin updates by itself. Go to Dashboard > Updates or the Plugins screen in your admin panel to see which plugins have a new version, then update them there. You can also turn on automatic updates per plugin, or use WP-CLI on the server. No extra plugin is needed.

How plugin updates used to work

Back in early 2007, WordPress had no built-in way to tell you a plugin was out of date. To check for WordPress plugin updates (an essential task I did once a fortnight), I visited my Plugins page, opened each author’s page from my list of WordPress plugins I use, and matched the version numbers by hand. It was slow and easy to forget.

That is why a new admin plugin called Update Manager caught my eye. It only displayed version information and did not modify your WordPress installation, so it was safe to try, though early users reported bugs. I predicted the WordPress team would build this into the core, and soon after they did: WordPress began showing plugin update notices on its own, so plugins like Update Manager were no longer needed. I also followed Weblog Tools Collection’s daily plugin release posts to stay current.

How to check for WordPress plugin updates today

Modern WordPress checks WordPress.org for new plugin versions automatically. You will find updates in three places:

• Dashboard > Updates: lists every plugin, theme and core update in one place. Tick the plugins you want and click the update button.
• Plugins screen: a plugin with a new version shows an update notice under its name, with a link to view the version details and changelog.
• Admin menu badge: a small number next to Plugins and Updates in the admin menu shows how many updates are waiting.

Premium plugins bought outside WordPress.org usually need a licence key entered in their settings before their updates appear in the same lists.

Check updates from the command line

If you manage sites over SSH, WP-CLI is faster than the admin panel:

• wp plugin list --update=available shows plugins with a new version.
• wp plugin update --all updates all of them.

Turn on automatic plugin updates

Since WordPress 5.5 (2020), each plugin on the Plugins screen has an “Enable auto-updates” link. Turning it on lets WordPress install new versions in the background. It is a good choice for small, well-maintained plugins and security plugins. For large plugins that change a lot (page builders, e-commerce), many site owners prefer to update by hand after a backup. See our full guide to auto-updating WordPress plugins and themes.

Safe update routine

1. Back up first. Take a full backup of files and the database, or use your host’s snapshot tool.
2. Read the changelog. Big version jumps can change settings or drop features.
3. Update one at a time on important sites, so you know which plugin caused a problem.
4. Check the site. Load the home page, a post and any forms or checkout pages after updating.
5. Remove unused plugins. Deactivated plugins still sit on the server and can still be attacked if outdated.

After big changes it is also worth a quick scan for broken internal links, since some plugin updates change shortcodes or URLs.

FAQ

How often should I check for plugin updates?

At least once a week. Security fixes are often released quietly, and automatic updates for trusted plugins close the gap between checks.

Why is a plugin not showing an update?

Either no new version exists, the plugin was closed on WordPress.org, or it is a premium plugin that needs an active licence key. A plugin that has not been updated for years is worth replacing.

Do I still need a plugin to check plugin versions?

No. WordPress has done this on its own for many years, so plugins like the old Update Manager are no longer needed.

Can a plugin update break my site?

Occasionally, yes. That is why you should back up first. If a site breaks, you can rename the plugin’s folder over FTP or your host’s file manager to deactivate it.