Skip to content

Versions

Software versions and updates

One screen listing WordPress, every plugin, every theme and your server software, with what needs an update, what has automatic updates on, and whether your PHP version still gets security fixes.

What it does

The tab opens with an update score and counts of waiting updates, then shows WordPress core, Plugins, Themes and Server environment.

Each plugin and theme shows the installed and latest version, whether it is active, and whether automatic updates are on. Flags warn when a plugin needs a newer WordPress or PHP, or has not been tested with your WordPress version.

The server section shows your PHP version and the date its security support ends.

Why it matters

Most hacked WordPress sites were running an old plugin with a known weakness. Staying current is the most effective security step of all.

Use it

  1. Open the Versions tab. Click Check Now for fresh results.
  2. Update plugins and themes one at a time with their Update button, checking the site after each.
  3. Delete plugins and themes you no longer use: inactive code can still be attacked.
  4. If PHP support is ending, ask your host to move you to a newer version.

Good to know

Automatic update settings are shown here but changed on WordPress's own Updates and Plugins screens.

Items that no update source reports on, such as custom plugins, show their update status as unknown rather than up to date.

There is deliberately no "update everything" button: one bad update can break a site, so updates go one by one with a confirmation.

Which plan includes it

The Versions tab is in every plan. Update, activate and delete buttons need full access to Stack Guard and the matching WordPress permission.

How it works, for developers
  • Results are cached for 12 hours in the transient smg_version_cache, cleared on any update, activation, deactivation, deletion or theme switch. Update data comes from WordPress's own update checks.
  • The update score starts at 100 and loses points per waiting update, and 5 more for PHP below 8.0.
  • PHP support dates are a table in SMG_Version_Manager::get_php_support(), reviewed each December; "ending" means under six months left.
  • Automatic update state mirrors WordPress's own rules (get_auto_update_state()), including constants and filters that override the screen.
  • Actions use the smg_plugin_action and smg_theme_action AJAX handlers, which check a nonce, full access and capabilities such as update_plugins.

Quick answers about software versions and updates

What does Software versions and updates do in Stack Guard?

The tab opens with an update score and counts of waiting updates, then shows WordPress core, Plugins, Themes and Server environment. Each plugin and theme shows the installed and latest version, whether it is active, and whether automatic updates are on. Flags warn when a plugin needs a newer WordPress or PHP, or has not been tested with your WordPress version. The server section shows your PHP version and the date its security support ends.

Why use software versions and updates on a WordPress site?

Most hacked WordPress sites were running an old plugin with a known weakness. Staying current is the most effective security step of all.

How do I set up software versions and updates?

1. Open the Versions tab. Click Check Now for fresh results. 2. Update plugins and themes one at a time with their Update button, checking the site after each. 3. Delete plugins and themes you no longer use: inactive code can still be attacked. 4. If PHP support is ending, ask your host to move you to a newer version.

Which Stack Guard plan includes software versions and updates?

The Versions tab is in every plan. Update, activate and delete buttons need full access to Stack Guard and the matching WordPress permission.

Not running Stack Guard yet? It is free.

Download Free