Out-of-date apps and plugins are the main way websites get hacked. Softaculous can update your installations automatically and take a backup first, so you stay secure without logging in every week. You can also upgrade manually when you prefer to test first.
Before you start
- The site must be listed in Softaculous → All Installations.
- Decide on a policy: automatic minor updates are safe for almost every site; major versions on complex shops are better tested on staging.
Turn on auto-upgrades
- Open cPanel → Software → Softaculous Apps Installer → All Installations.
- Click the Edit details (pencil) icon next to the installation.
- Under Auto Upgrade, choose:
- Do not Auto Upgrade
- Upgrade to Minor versions only (e.g. 6.7.1 → 6.7.2), recommended for most sites
- Upgrade to any latest version available (Major as well as Minor)
- Tick Auto Upgrade WordPress Plugins and Auto Upgrade WordPress Themes if you want them updated too.
- Tick Auto backup before upgrade (wording may differ), or set Automated backups so a recent copy always exists.
- Click Save Installation Details.
Note: WordPress also has its own auto-update settings. If both are active, updates simply happen sooner; there is no conflict. Keep your admin email correct to receive update reports.
Upgrade manually
- When a new version exists, All Installations shows an Upgrade icon or a red badge next to the version.
- Click it, tick Create backup, and click Upgrade.
- Check the site and admin area afterwards.
Softaculous emails you when updates are available unless you disabled notifications in the installation's settings or in Softaculous → Email Settings.
What to check after an automatic update
- Open the home page, a few inner pages, the contact form and checkout.
- Look in the error log for new PHP errors.
- Clear LiteSpeed Cache and any CDN cache.
If an update breaks the site
- Open Softaculous → Backups and Restore and restore the backup taken just before the upgrade (files and database). See Softaculous restore.
- If no Softaculous backup exists, restore yesterday's copy from JetBackup.
- For WordPress, a single broken plugin can often be disabled by renaming its folder in
wp-content/pluginswith File Manager. - Set Auto Upgrade to minor versions only for that site and test the next major version on staging.
Troubleshooting
- Auto-upgrade never runs: the installation is not detected correctly, or file ownership prevents writing. Re-scan via import, or contact support.
- Premium plugins not updated: paid plugins need a licence key inside WordPress; Softaculous cannot update them without it.
- Too many update emails: adjust notifications in Softaculous Email Settings.
