> For the complete documentation index, see [llms.txt](https://docs.hostinger.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.hostinger.com/wordpress/security.md).

# WordPress Security

Manage WordPress security on Hostinger with smart auto-updates for core, plugins, and themes, update logs, PHP compatibility checks, and Patchstack.

Keep WordPress core, plugins, and themes up to date automatically, and see the update state of your whole install at a glance — from the **Security** page of your WordPress site in hPanel.

## What's on the Security page

* **WordPress version** — the installed core version and whether it's current.
* **Smart auto-updates** — managed automatic updates for core, plugins, and themes (see below).
* **Updates log** — a history of updates that were applied.
* **Plugins and themes** — every installed plugin and theme with its update state, so outdated components are visible without logging into wp-admin.
* **PHP compatibility** — whether your site's PHP version suits the installed WordPress version. Change it under [PHP Configuration](/websites/php.md).

## Automatic updates

Two modes:

* **Smart auto-updates** (recommended) — Hostinger manages the update process.
* **Native auto-updates** — WordPress's built-in update behavior.

You control how much gets updated automatically:

| Level                     | What updates                         |
| ------------------------- | ------------------------------------ |
| **No updates**            | Nothing — you update manually        |
| **Security updates only** | Only security releases               |
| **Minor updates only**    | Minor and security releases          |
| **All updates**           | Everything, including major versions |

> **Tip:** Keep at least security updates on. Before allowing major updates automatically, test them on [Staging](/wordpress/staging.md) so breaking changes get caught before production sees them.

## Vulnerability protection

For dedicated WordPress vulnerability scanning and virtual patching, Hostinger partners with **Patchstack** — offered from the Security page.

Server-level protection is separate and always on: see [Malware Scanner](/websites/malware-scanner.md) for file-level malware detection on your hosting.

## Troubleshooting

**Auto-update broke my site** Roll back via [Backups](/websites/backups.md), or switch the offending component to manual updates until a fixed release is out.

***

*Last updated: July 22, 2026*