WordPress can update its core and at times plugins and themes (if there’s a potential threat) automatically. WordPress is software and there can be critical vulnerability and security problems stemming from a popular theme or a plugin. When that happens, the software developers that keep WordPress up to date will push an automatic update on your WordPress installation.
In rare instances, these updates can potentially break your website, which is why you have the option to update everything manually.
Automatic updates are an essential security feature, and we don’t recommend disabling it, but if you want to – you can.
There are two ways to disable automatic updates in WordPress:
Disable Updates Manually
If you don’t want to use a third-party plugin, you can disable updates manually by editing the wp-config.php file. Simply add the following line to your wp-config.php file:
define( 'WP_AUTO_UPDATE_CORE', false );
And it will disable all automatic updates.
If you want to disable theme and plugin updates but still receive the minor core updates, you can insert the following filters to the theme’s functions.php file or in a specific plugin:
add_filter( 'auto_update_theme', '__return_false' );
add_filter( 'auto_update_plugin', '__return_false' );
Disable Updates With A Plugin
A more straightforward method to disable updates is by using a free plugin called Easy Updates Manager.
Easy Updates Manager
Login to your WordPress Dashboard, head to Plugins > Add New, fill in Easy Updates Manager in the search field, and click Install Now:
Click Activate to activate the plugin:
Head to Dashboard > Updates options to configure the update rules.
You can use Disable all updates to disable everything, but we don’t recommend that as it will prevent all update notifications from showing in the Dashboard.
We recommend picking the options manually. For example, you can choose to update the WordPress core automatically but disable plugin and theme updates.
Please note that if you choose Disable plugin updates/Disable theme updates instead of Disable auto updates, this will remove all update notifications in the plugins and theme lists.
If anything breaks during the update, you can always roll-back to the previous version as Easy Updates Manager keeps a log of all changes. Head to Dashboard > Updates options and click the Logs tab to revert the update.
Most users forget to do updates on their own, so automatic updates are helpful to maintain good WordPress security. If you have many websites, automatic updates can save you a lot of time, plus you have the added benefit of knowing that your websites are updated in case there’s a potential security vulnerability.
However, there’s a possibility automatic updates can break your website, especially if your site is heavily customized and you modified WordPress core files at some point. This usually rarely happens, but it’s possible an update has a conflict with a plugin or theme you’re using.
In the end, it’s really up to you. We recommend keeping updates enabled, especially when you’re starting out and your site isn’t too complex. When you’re running a store or any type of complex website using a higher number of plugins, it could be beneficial to run updates manually on a staging site and pushing those updates live once tested.