To update a WordPress theme, back up your site, then go to Appearance > Themes in your dashboard and click the update notice, or upload the new ZIP file manually if the theme came from ThemeForest or a developer’s own site. The whole process usually takes two to ten minutes. The part people get wrong is what happens to their customizations, so that is where we will spend most of this guide.
Theme updates patch security holes, add block editor features and keep your site compatible with the latest PHP and WordPress core releases. Skipping them for a year is how sites end up broken, slow or compromised.
The Short Answer: Four Ways to Update a WordPress Theme
- One-click dashboard update for themes from the WordPress.org directory or themes with a valid license key connected.
- Manual ZIP upload through Appearance > Themes > Add New > Upload Theme, which is the standard route for premium themes.
- SFTP or file manager replacement of the theme folder, useful when the dashboard is throwing errors or the file is too large to upload.
- Automatic updates, toggled on per theme from the Themes screen, best reserved for sites with a child theme and daily backups.
Each method installs the same files. The difference is how much control you have if something goes sideways.
Why Theme Updates Actually Matter
A theme is executable PHP, not just design. An outdated theme can ship a known vulnerability that scanners find within hours of the patch being published, which is one of the most common entry points on hacked WordPress sites.
- Security patches close vulnerabilities that are public the moment a fix is released.
- Compatibility with new WordPress versions, PHP 8.3 and 8.4, and page builders like Elementor or Bricks.
- Performance improvements, since newer theme versions often drop legacy jQuery and cut render-blocking assets.
- New features, such as block patterns, full site editing templates and improved accessibility markup.
If you have not touched updates in months, read our take on why WordPress maintenance is important before you start clicking buttons.
Do This Before You Update Anything
Roughly nine out of ten “the update broke my site” tickets we see could have been a five-minute fix if there had been a backup. Treat the prep as part of the job.
- Take a full backup of files and database. Automated daily backups are standard on managed hosting, but take a manual snapshot right before you update anyway. The official WordPress backup documentation covers the manual approach if you are doing it yourself.
- Read the changelog. Major version jumps (3.x to 4.0) often restructure template files and can retire shortcodes you rely on.
- Note your current theme version so you know exactly what to roll back to.
- Check whether you edited theme files directly. Any edit inside the parent theme folder gets overwritten.
- Test on staging first if the site earns money. Push to staging, update, click through your key pages, then deploy.
Also update plugins and WordPress core in a sensible order: core first, then plugins, then the theme. That way you are not chasing three variables at once when something misbehaves.
Method 1: Update From the WordPress Dashboard
This is the fastest route and works for any theme registered with the WordPress.org repository or connected to a license server.
- Log in and open Appearance > Themes.
- Look for the “New version available” notice on the theme card.
- Click Update now and wait for the confirmation message.
- Clear your cache, including any CDN or page cache layer, then reload the front end.
- Check your homepage, a blog post, a product page and your contact form before you walk away.
You can also update from Dashboard > Updates, where WordPress groups core, plugins and themes on one screen. That page is handy when you are running through a batch of monthly maintenance.
Method 2: How to Update a WordPress Theme Manually With a ZIP File
Premium themes bought outside the directory often need a manual upload, especially if the license is not activated on that install. Since WordPress 5.5, you can upload a new ZIP straight over the existing theme.
- Download the latest ZIP from the vendor account (ThemeForest downloads, for example, sit under Downloads > Installable WordPress file only).
- Go to Appearance > Themes > Add New > Upload Theme.
- Choose the ZIP and click Install Now.
- WordPress detects the existing installation and shows a comparison of the current version versus the uploaded one.
- Click Replace current with uploaded.
If you get an “is the destination folder already exists” error, the file names likely differ. Deactivate to a default theme, delete the old parent folder (never the child theme), then install fresh.
Related reading: How to Upgrade WordPress PHP in 2026 Without Breaking Your Site.
For a closer look at this topic, see our guide: How to Find Out Who Hosts My WordPress Site: 6 Ways That Actually Work.
Method 3: Replace the Theme Folder Over SFTP
When the dashboard is unreachable or the ZIP exceeds your PHP upload limit, go to the files directly. This is the approach most developers use on a self-hosted WordPress install.
- Connect over SFTP or open your host’s file manager.
- Navigate to
/wp-content/themes/. - Rename the existing theme folder to something like
astra-oldas a local fallback. - Unzip the new version on your computer and upload the fresh folder with the original name.
- Confirm the site loads, then delete the renamed backup folder.
Keep an eye on file permissions after upload. Folders should sit at 755 and files at 644 on most standard setups.
How to Update a WordPress Theme Without Losing Customizations
Here is the honest answer nobody puts in the first paragraph: updating a theme deletes edits stored inside the parent theme folder, and nothing else. Content, media, menus, widgets and Customizer settings live in the database and survive every update.
What is at risk:
- Direct edits to
style.css,functions.phpor template files in the parent theme. - Custom template files you dropped into the theme directory.
- Images or fonts you uploaded into the theme folder rather than the media library.
- Translation files placed inside
/languages/in the parent theme.
What is safe: posts, pages, products, users, plugin settings, menus, Customizer options, block patterns and anything saved through the site editor. Child theme files are also untouched, which is exactly why they exist.
Use a Child Theme
A child theme is a small folder holding a style.css header and a functions.php that inherits everything from the parent. Your edits live there permanently, and the parent updates freely underneath. The WordPress child theme handbook walks through the exact file structure, and it takes about ten minutes to set up.
If You Already Edited the Parent
Copy the modified files somewhere safe, run a diff against the new version, then port your changes into a child theme instead of pasting them back. It is a one-time cost that saves you from repeating this every quarter. If you build and distribute themes yourself, our guide on how to sell themes on WordPress covers versioning from the other side of the fence.
Automatic Theme Updates: Yes or No?
WordPress has supported per-theme auto-updates since version 5.5. On the Themes screen, click a theme and choose Enable auto-updates. Whether you should depends on the site.
- Turn them on for simple blogs and brochure sites running a well-maintained theme with a child theme in place and daily backups.
- Leave them off for stores, course platforms and anything with heavy customization, where a surprise layout shift costs real revenue.
Sites running WooCommerce, LMS plugins or gated content deserve a staging step every time. That is true whether you run a WordPress course site or a membership platform where a broken template locks paying users out of their content.
Something Broke. Now What?
Most post-update problems are cosmetic and fix themselves once you clear caches. Work through this order:
- Purge every cache layer: page cache, object cache, CDN and browser.
- Regenerate the site’s CSS if you use a page builder (Elementor: Tools > Regenerate Files & Data).
- Check the error log for fatal PHP errors naming a specific file.
- Roll back the theme by uploading the previous ZIP through Add New > Upload, or restoring the renamed folder over SFTP.
- Restore the backup if the database is involved, then retry on staging.
Vendors keep older releases available in your download history, so grab the previous version before you need it. If you cannot get in at all, our WordPress support team can roll the site back for you, usually in under fifteen minutes.
Frequently Asked Questions
How to update a WordPress theme without losing customization?
Put your customizations in a child theme, and the parent theme can update as often as it likes without touching a single one of your edits. Customizer settings, menus, widgets and all page content live in the database and survive updates regardless. Only files you edited directly inside the parent theme folder get overwritten.
Does WordPress update automatically?
WordPress installs minor core security releases automatically by default (for example 6.7.1 to 6.7.2), but major versions, plugins and themes require you to opt in. You can enable auto-updates per item from the Plugins screen or Appearance > Themes. Many managed hosts add their own update layer with a backup taken immediately beforehand.
How do I manually update my WordPress site?
Download the latest WordPress release from WordPress.org, delete the old wp-admin and wp-includes directories over SFTP, upload the new ones, then copy the fresh wp-content files without deleting your existing folder. Leave wp-config.php and your uploads alone. Visit /wp-admin/upgrade.php afterwards so WordPress can run any database updates, which normally takes a few seconds.
How do I update WordPress to the latest version?
Open Dashboard > Updates and click Update to version X, which takes about 30 to 60 seconds on most sites. Back up first and update plugins afterwards so you are testing one change at a time. Check that your PHP version meets the minimum requirement, since older PHP releases stop receiving security support and can block newer WordPress features.
If I update my WordPress theme, will it delete everything?
No. A theme update replaces files in that theme’s folder only, so your posts, pages, images, users and plugin settings stay exactly where they are. The one real risk is code you wrote directly into parent theme files, which is why a child theme matters.
Want Updates to Stop Being Stressful?
WebVibo gives every plan one-click staging, automated daily backups and 24/7 WordPress specialists, so you can push a theme update and roll it back in seconds if it misbehaves. See what is included in managed hosting and move your site over free.