Versions
Software versions and updates
One screen listing WordPress, every plugin, every theme and your server software, with what needs an update, what has automatic updates on, and whether your PHP version still gets security fixes.
What it does
The tab opens with an update score and counts of waiting updates, then shows WordPress core, Plugins, Themes and Server environment.
Each plugin and theme shows the installed and latest version, whether it is active, and whether automatic updates are on. Flags warn when a plugin needs a newer WordPress or PHP, or has not been tested with your WordPress version.
The server section shows your PHP version and the date its security support ends.
Why it matters
Most hacked WordPress sites were running an old plugin with a known weakness. Staying current is the most effective security step of all.
Use it
- Open the Versions tab. Click Check Now for fresh results.
- Update plugins and themes one at a time with their Update button, checking the site after each.
- Delete plugins and themes you no longer use: inactive code can still be attacked.
- If PHP support is ending, ask your host to move you to a newer version.
Good to know
Automatic update settings are shown here but changed on WordPress's own Updates and Plugins screens.
Items that no update source reports on, such as custom plugins, show their update status as unknown rather than up to date.
There is deliberately no "update everything" button: one bad update can break a site, so updates go one by one with a confirmation.
Which plan includes it
The Versions tab is in every plan. Update, activate and delete buttons need full access to Stack Guard and the matching WordPress permission.
How it works, for developers
- Results are cached for 12 hours in the transient
smg_version_cache, cleared on any update, activation, deactivation, deletion or theme switch. Update data comes from WordPress's own update checks. - The update score starts at 100 and loses points per waiting update, and 5 more for PHP below 8.0.
- PHP support dates are a table in
SMG_Version_Manager::get_php_support(), reviewed each December; "ending" means under six months left. - Automatic update state mirrors WordPress's own rules (
get_auto_update_state()), including constants and filters that override the screen. - Actions use the
smg_plugin_actionandsmg_theme_actionAJAX handlers, which check a nonce, full access and capabilities such asupdate_plugins.
Quick answers about software versions and updates
What does Software versions and updates do in Stack Guard?
The tab opens with an update score and counts of waiting updates, then shows WordPress core, Plugins, Themes and Server environment. Each plugin and theme shows the installed and latest version, whether it is active, and whether automatic updates are on. Flags warn when a plugin needs a newer WordPress or PHP, or has not been tested with your WordPress version. The server section shows your PHP version and the date its security support ends.
Why use software versions and updates on a WordPress site?
Most hacked WordPress sites were running an old plugin with a known weakness. Staying current is the most effective security step of all.
How do I set up software versions and updates?
1. Open the Versions tab. Click Check Now for fresh results. 2. Update plugins and themes one at a time with their Update button, checking the site after each. 3. Delete plugins and themes you no longer use: inactive code can still be attacked. 4. If PHP support is ending, ask your host to move you to a newer version.
Which Stack Guard plan includes software versions and updates?
The Versions tab is in every plan. Update, activate and delete buttons need full access to Stack Guard and the matching WordPress permission.
Not running Stack Guard yet? It is free.
Download Free