WordPress · WooCommerce · Plugins · Themes
WordPress upgrades and maintenance, done safely
We back up first, update WordPress, plugins and themes in the right order, test the pages that matter and fix anything that breaks. One-off $479, or ongoing from $497 a month.
Is it safe to update WordPress?
Core WordPress updates are usually safe. Plugins and themes are where sites break, especially when several update at once. The safe way is a full backup, updates one at a time or on a test copy, and a check of forms, logins and checkout afterwards. Cyberstore does this as a one-off for $479 + GST or on a monthly plan.
Do I really need to keep WordPress updated?
Yes. Most hacked WordPress sites we clean up were broken into through an out-of-date plugin, not WordPress itself. Updates close known holes, and attackers scan for sites that have not applied them.
The trick is updating safely. Clicking "update all" on a live site with no backup is how a lot of businesses end up with a broken website. We back up, test and then update.
| Version | Released or ended | Status | Notes |
|---|---|---|---|
| WordPress 7.x | Released 20 May 2026 (7.0) | Supported | PHP 7.4 minimum, 8.4 or 8.5 recommended |
| WordPress 6.x | Older major version | Security backports only | Plan the move to 7 |
| WordPress 4.7 to 5.x | Very old | Courtesy backports only | Upgrade now |
| WordPress 4.6 and older | Security updates stopped July 2025 | No security fixes | Upgrade or rebuild |
Sources: WordPress security team: updates cease for 4.1 to 4.6, WordPress 7.0 hosting compatibility. Checked 23 October 2026.
// Price
What it costs
Fixed price agreed before we start. Prices are in Australian dollars and exclude GST.
One-off update and fix
Backup, core, plugin and theme updates where compatible, testing and a written summary.
$479
Security and maintenance plan
Ongoing tested updates, monitoring, off-server backups and priority support. See plans.
From $497 / month
Big jumps
Sites several major versions behind, or on PHP 7.x. Often paired with a PHP upgrade.
Quoted
If an update reveals malware or a hack, we tell you straight away and quote the cleanup separately.
Who does the work
Noah Greenstone, Founder and Principal Consultant. 30+ years in digital, building and securing websites in Perth since 2008. You deal with the person doing the work, not a call centre. About Noah
// How we do it
How we update WordPress safely
- 01
Backup
A full backup of files and database, stored off the server, before anything changes.
- 02
Check
We check WordPress core, every plugin and your theme for available updates, known vulnerabilities and PHP compatibility.
- 03
Update
Updates are applied in a sensible order, on a test copy first for larger or riskier changes.
- 04
Test
Pages, forms, logins and checkout are checked. Anything that misbehaves is fixed or rolled back.
- 05
Clean up
Unused and abandoned plugins are removed or replaced, and old admin accounts are tidied up.
- 06
Report
A short summary of what was updated, what we fixed and anything that needs a decision from you.
Signs your WordPress site needs attention
- Updates waiting in the dashboard for weeks
- Plugins that have not been updated by their developer in over a year
- "This plugin requires a newer version of PHP" messages
- A site health warning in the dashboard
- Nobody knows where the last backup is
Site already hacked or showing a critical error? Go to hacked website repair or website repair, or call 1300 566 652.
// FAQ
Common questions
Is it safe to click update in WordPress?
Usually, but not always. Core updates are well tested. Plugins and themes are where things break, especially when several update at once or a plugin has not been touched by its developer in a while. Take a backup first, update one thing at a time, and check the site after each one.
Why are automatic WordPress updates a bad idea?
A percentage of updates always break something. With auto-updates on, that happens at 3am with nobody watching and no fresh backup. Auto-updates also do nothing about abandoned plugins, which are a common way in for hackers.
Why did my site break after a plugin update?
Usually the plugin now needs a newer PHP or WordPress version, or it clashes with another plugin or your theme. We find the cause, roll back if needed, and get everything working on current versions.
How often should WordPress be updated?
Security patches should go on within a day or two of release. Everything else can be done monthly, after testing. That is how our plans work.
Which WordPress version is supported?
Officially, only the latest version. The WordPress security team backports security fixes to older branches as a courtesy, and stopped doing that for 4.1 to 4.6 in July 2025. WordPress 7.0 also dropped support for PHP 7.2 and 7.3.
Do you look after WooCommerce stores?
Yes. Stores get extra testing on cart, checkout and payment gateways before any update goes live.
// Keep going
Related services
PHP version out of date
Host warning you about an old PHP version? We test, fix and upgrade WordPress, Joomla and custom sites to a supported PHP version. From $690 + GST.
Website Security & Maintenance
Website security and maintenance plans for Perth businesses: hardening, daily monitoring, tested updates and off-server backups for WordPress, Joomla and more.
Hacked Website Repair
Hacked website? We investigate, remove malware and backdoors, close the entry point and harden WordPress, Joomla and custom sites. Perth, since 2008.
// Next step
Talk to us about WordPress Upgrade & Maintenance
Tell us what you run and what you are worried about. We will come back within one business day and, if it helps, send you a fixed-price quote.
- No-obligation first consult
- Fixed scope and price before work starts
- A clear written report and next steps
Written and reviewed by Noah Greenstone, Founder and Principal Consultant. Last reviewed 23 October 2026.
Tell us what is going on
We read every enquiry and reply within one business day. If it is urgent, call 1300 566 652.
Organisations Noah and the team have built, secured and supported
