Updating a WordPress site to version 7.0 safely

A major WordPress release always creates the same tension: you want the security fixes and the new capabilities, but you do not want to be the person who finds the breaking change on a live site. If you would rather not run that risk yourself, our managed WordPress maintenance service handles major-version upgrades on staging before anything touches production.

WordPress 7.0 is a milestone release, and milestone releases behave differently from the routine point updates you have been clicking through for years. This guide covers what genuinely changed, which sites carry the most upgrade risk, and the sequence that keeps a 7.0 update boring.

Why a Major Release Is Different

Minor WordPress releases are mostly security and bug fixes. They are designed to be safe enough that automatic updates handle them without supervision. A major release is a different animal: it can change how the editor behaves, deprecate functions that plugins still call, and shift defaults that your theme quietly depended on.

That does not make major releases dangerous. It makes them worth testing. The sites that break are almost never the ones running a well-maintained theme and a short plugin list. They are the ones carrying five years of accumulated custom code that nobody has looked at since it was written.

What Changed in 7.0

The headline themes of 7.0 are deeper block editing freedom and tighter integration points for AI-assisted tooling, while keeping your content and site structure under your own control. For most site owners the practical effects are narrower than the announcement suggests.

Editing and Block Behaviour

Block editing continues to absorb functionality that used to require a page builder. If your site is built on a classic theme with ACF-driven templates, as many business sites are, this affects you far less than it affects sites running full site editing. Your editing experience largely stays where it was.

Deprecations Are the Real Risk

Every major release retires functions that were marked deprecated in earlier versions. Plugins that have been abandoned for two or three years are the usual casualties. This is why plugin age matters more than plugin count when you are assessing upgrade risk.

Which Sites Should Be Careful

Not every site carries the same risk. Before you update, work out which category you are in.

  • Low risk: a well-maintained theme, actively updated plugins, no custom PHP beyond a child theme
  • Moderate risk: a page builder, a commercial theme that has not been updated in over a year, or a handful of custom snippets
  • High risk: WooCommerce with payment or shipping extensions, membership or LMS plugins, or bespoke code written by a developer you no longer work with
  • Highest risk: any plugin whose last update predates the previous major WordPress release

If you are in the top two categories, the update is not something to run on a Friday afternoon on a live site.

The Safe Update Sequence

The process below is the one we use across every site we look after. It is deliberately unexciting, because the goal is that nothing memorable happens.

  1. Take a full backup of files and database, and confirm you can actually restore it
  2. Clone the site to a staging environment that mirrors production, including PHP version
  3. Update WordPress core on staging first, before touching any plugins
  4. Walk the critical paths yourself: checkout, contact forms, login, search, and any bespoke functionality
  5. Update plugins one at a time on staging, checking after each, rather than in a single batch
  6. Check the site in a browser with the console open and look for new JavaScript errors
  7. Only then repeat the sequence on production, during a low-traffic window
  8. Watch error logs and uptime for 48 hours afterwards

Test Plugins Individually, Not in Bulk

The single most common mistake is selecting every plugin and hitting update. When something breaks you now have no idea which plugin caused it, and your only option is to disable them all and reintroduce them one by one. Updating individually takes longer but turns a two-hour debugging session into a thirty-second rollback.

What to Do If Something Breaks

If the site goes white or a critical function stops working, resist the urge to start editing files. Restore the backup first, get the site working, and investigate on staging where the stakes are zero. A broken live site is not a debugging environment.

If you are already past that point and the site is down, our WordPress emergency support exists for exactly this situation.

Do Not Skip Straight to 7.0 From an Old Version

Sequential Upgrades Are Safer

If your site is several major versions behind, jumping directly to 7.0 stacks every intermediate breaking change into one event. Upgrading through the intermediate versions is slower but isolates failures, so you know which release caused a problem.

Check PHP First

New WordPress versions raise their PHP requirements over time. Confirm your hosting PHP version before the WordPress update, not after, because fixing a PHP incompatibility mid-upgrade is considerably less pleasant than fixing it in advance.

The Bottom Line

WordPress 7.0 is worth updating to. The security fixes alone justify it, and falling behind on major versions only makes the eventual upgrade harder. The point is not to avoid the update. It is to run it in an order where mistakes are cheap.

Not sure how much upgrade risk your site is carrying? Our free site audit flags outdated plugins, abandoned code, and version gaps before they turn into an outage.

Is your WordPress site as healthy as it should be?

Get a free audit covering security, updates, backups, and performance gaps. Takes 60 seconds to request and costs nothing.

Get your free audit