The “Update All” button on a live WordPress site is the most common way small sites break. Not because updates are dangerous — because updating everything at once, on live, with no backup, means when something breaks you don’t know what did it or how to get back. Here’s the calm version. You’ll need: admin access, and ideally your host’s staging feature (most decent hosts have one-click staging; if yours doesn’t, that’s worth knowing about your host).

Take a real backup first

Your host’s backup plus one you control. If you have WP-CLI:

wp db export backup-$(date +%Y-%m-%d).sql

No WP-CLI? Your host’s snapshot button, or a backup plugin export. The test of a real backup: you know where it is and how you’d restore it. If you can’t answer both, you have a hope, not a backup.

Make the staging copy

One click on most hosts (look for “Staging” in the panel). Everything from here happens on the copy first. If you genuinely can’t stage, update on live in a quiet hour — but do the next steps one at a time with extra care, and know your restore path cold.

Update in the right order: core, then plugins, then theme

Order matters because plugins are written against core, and themes against both:

wp core update
wp plugin update --all
wp theme update --all

In the admin UI, that’s Dashboard → Updates, core first. If a plugin’s changelog mentions “major” or a new major version number, read its changelog before updating — major bumps are where breaking changes live.

Click through the money paths

On staging, with the updates in: front page, one interior page, the contact form (actually submit it), and checkout if you sell. Look for layout weirdness too — theme and page-builder updates are where visual breakage hides. Five minutes of clicking beats five days of “customers couldn’t reach us and we didn’t know.”

Push to live and verify once more

Use the host’s “push staging to live” if that’s how you staged, or repeat the updates on live now that they’re proven. Then click the same money paths on live once. Done — same routine, every month, boring on purpose. If this is the chore that never gets done at your organization, that’s exactly what a maintenance plan is for.