WordPress maintenance is the ongoing set of tasks required to keep a WordPress installation secure, performant, and reliable — including software updates, backup verification, security scanning, database optimization, and uptime monitoring. The minimum responsible maintenance cycle for a production site includes: updating WordPress core, plugins, and themes at least monthly (immediately after security patches), verifying that automated off-site backups are completing successfully and that restore tests pass, reviewing the security event log for failed login attempts or suspicious file changes, and running a database optimization pass to remove post revisions, transients, and orphaned post meta. Neglected maintenance is one of the leading causes of WordPress security incidents — the majority of compromised sites are running outdated plugin or theme versions at the time of breach. Maintenance can be performed manually, delegated to a managed hosting platform, or handled by a WordPress maintenance service provider who owns the update-and-monitor workflow on the client's behalf.
Glossary entry