"I tried to keep up with the updates
But there's so much third party
Plus my hosting adds more issues
'Cause it's not running the latest PHP"
These are lyrics from the first half of Verse 2 in the song, "WordPress Got Ran Over By My HubSpot", which highlights the ongoing struggles you have to deal with between updates to WordPress itself, third party plugins and server level updates like PHP.
The issue of having to deal with a long list of third party plugins in a WordPress website was addressed earlier in this series, although it was more a reference to the ongoing cost involved, both of money and time. Beyond that, there is the constant maintenance that you have to stay on top of.
As an open source solution, WordPress is a large package of files that you install when you setup the CMS. That process also creates the database tables. On a regular basis, there are updates to the core platform, which include bug fixes and security patches, usually more on the side of security patches. Security holes in WordPress are usually very well known, so if you do not patch those holes, you are just begging for your site to be hacked.
Then, less often, you have larger updates like moving from version 4 to 5. Those are always more significant and require more attention. Why? Because is what all of the plugins build off of, and when major changes are made, there are always plugins that have not been updated accordingly. That becomes a wall that forces you to update all of the plugins at the same time... and that is IF all of your plugins even have an appropriate update available.
Speaking of plugins... all of your plugins are third party, so you will have an irregular flow of updates... and there's always something that needs attention. These updates could be bug fixes, security fixes, or new features. Some developers will notify you of updates with details on what is included and how to best address it. Some will not. You'll see updates in your WP admin and some you'll be able to apply with one click. Some will require manual updates.
Either way, you better prepare yourself before clicking any of those buttons. Does the update work with the version of WordPress you have installed? Does it include any changes that might introduce new conflicts with other plugins? You may not know the answer to those questions until you close your eyes, pull the trigger, then slowly open your eyes again as you anxiously look to see if your site is still standing.
Oh, and did you customize that plugin? That one-click update will wipe your customization and you'll have to re-apply it. That sounds fun.
Alongside of keeping your core WordPress and collection of plugins updated and playing nicely with each other, you have your hosting account to keep tabs on. The main item that plays a role here is PHP, which is the foundation of everything. There are many elements of your LAMP stack environment that have to be configured correctly for your site to work, but PHP will have occasional updates. While your web host can generally handle that for you, it is a common situation to update PHP just to find that something in the WP package no longer works. Maybe the entire site goes down, then you have to reverse the server changes.
So, putting all of the above together, you can see that a WordPress site is a sensitive balancing act as you juggle all of your plugins while also keeping core WordPress and PHP current and still working. There are so many moving parts in this scenario and it only takes ONE bad apple to ruin the whole bushel. One plugin, one file, one database update... and the whole thing can come crashing down.
Can you just leave it as-is when it's working and ignore the updates?? Sure... if you like getting hacked.
As we're looking at the HubSpot CMS in comparison to WordPress, how does HubSpot stack up against all of the above? I'm glad you asked.
I have personally migrated a great number of clients off of WordPress and onto HubSpot's CMS Hub... and the client is always thrilled with their decision!
If you're running a website on WordPress, it's time to stop wasting so much time applying band-aids to your website and fighting just to keep it standing. We can help. Let's chat.