One of the most valuable features of WP Engine is how it handles WordPress updates. On standard hosting, updates are your responsibility — you log in, check for available updates, apply them, and hope nothing breaks. On WP Engine, the platform manages this for you automatically. Here’s exactly how it works.
What WP Engine Updates Automatically
WordPress Core Updates
WP Engine automatically applies minor WordPress core updates — security patches and maintenance releases — across all hosted sites. For major WordPress releases (like going from 6.4 to 6.5), WP Engine stages the update, tests for compatibility, and rolls it out in a controlled manner. You can configure update timing preferences in the User Portal.
PHP Version Updates
Running an outdated PHP version is one of the most common performance and security vulnerabilities in WordPress. WP Engine manages PHP updates across the platform, keeping your site on a current, supported PHP version without requiring manual server configuration. You can also control your PHP version through the User Portal if a specific version is needed for compatibility.
Plugin and Theme Updates — Smart Plugin Manager
WP Engine’s Smart Plugin Manager is an add-on that handles plugin and theme updates automatically using AI-powered visual regression testing. Here’s what makes it different from just auto-updating:
- Updates are applied to a copy of your site first, not directly to production
- An 18-point visual regression test runs after each update, comparing screenshots of key pages before and after
- If the test detects a visual change that suggests something broke, the update is automatically rolled back
- Only updates that pass testing are applied to your live site
- You receive a report of what was updated, what was rolled back, and why
This removes the biggest risk of automatic plugin updates — a plugin update breaking your site’s layout or functionality without anyone noticing until a visitor reports it.
Manual Update Controls
WP Engine gives you control over update schedules through the User Portal. You can set maintenance windows for when updates are applied, exclude specific plugins from automatic updates if they require manual review, and review pending updates before they’re applied if you prefer a supervised approach.
What Happens If an Update Breaks Something
If a WordPress core or plugin update causes an issue despite the testing, WP Engine’s daily backups with 40-day retention mean you can restore to any previous state quickly. The User Portal shows all available restore points and lets you roll back with a few clicks — no server access or developer required.
Why This Matters for Security
The window between when a plugin vulnerability is discovered and when site owners apply the patch is when most exploits happen. Attackers scan millions of WordPress sites looking for specific vulnerable plugin versions within hours of a vulnerability being published. Automatic updates dramatically shrink that window, reducing your exposure to known vulnerabilities from weeks or months to hours or days.
Getting Automatic Updates on Your Site
WordPress core and PHP updates are managed automatically on every WP Engine plan. Smart Plugin Manager is available as an add-on. See all WP Engine plans through Screenwalker for exclusive pricing, or learn more about what next generation WordPress hosting includes.
