Security tests

Automatic WordPress core updates

How Security Ninja checks automatic WordPress core updates, and how to enable them safely.

This test checks whether WordPress can apply core updates automatically. Automatic updates help you receive security patches without waiting for a manual click.

WordPress can auto-update minor releases, all releases, or none, depending on configuration and your host.

To allow all core updates, add this to wp-config.php above the “That’s all, stop editing!” line:

define( 'WP_AUTO_UPDATE_CORE', true );

To limit automatic updates to minor releases only:

define( 'WP_AUTO_UPDATE_CORE', 'minor' );

After enabling, confirm under Dashboard → Updates that WordPress reports the expected update behavior. Keep backups. Custom themes and specialized plugins can still break after a major update, so review the site after larger releases.

Managed WordPress hosts sometimes control updates for you. Check with your host if the setting does not stick.

Also keep plugins and themes updated: Check if plugins are up to date, Theme updates.

Still stuck? Get help or contact us.

Larger screenshot

Enlarged image