Always back up first, then update from the dashboard. A quick backup means fewer surprises.
- Create a backup: use a plugin like UpdraftPlus, or take a full backup in cPanel (Backup or JetBackup if available). A staging copy is even safer.
- In WordPress go to Dashboard > Updates.
- Update plugins first, then themes, then WordPress core last.
- Reload your site and test key pages, forms and checkout.
Update one major item at a time so you can tell what caused any issue. If a plugin breaks the site, deactivate it (see our guide on disabling plugins). Keeping everything current is the single best security habit. Need help recovering? Open a ticket.