Ecommerce website maintenance: a monthly checklist for shops

An online shop needs more care than a brochure website, because a broken checkout loses sales the same day. WooCommerce's own guide suggests one fixed maintenance day a month for most stores, with security fixes installed sooner. On that day: take a backup, update in the right order, then place a test order before you call it done.

Why once a month?

Most shops run WordPress, WooCommerce, a theme, a payment plugin and a few extensions. Each one gets updates on its own schedule. Doing them together once a month keeps the shop current without someone clicking "update" every few days. When a release fixes a security hole, or fixes something your checkout depends on, do not wait for the monthly day. WooCommerce publishes security advisories and a changelog that say which releases carry security fixes.

What should I back up first?

A WooCommerce shop keeps its data in two places. The database holds your products, orders, customers and settings. The wp-content folder holds your theme, plugins and uploaded images. A backup needs both. An automatic daily backup is easiest, but before an update, take a fresh one by hand and check it finished.

In what order should I update?

1. If your host offers a staging copy of the site, update there first and test.
2. On the live shop, switch on Coming soon mode so no one checks out halfway through the update.
3. Update WooCommerce on its own. If WordPress then asks you to update the WooCommerce database, run that before anything else.
4. Then update the payment plugin, the theme and the other extensions. Check each one's "tested up to" WooCommerce version, and ask its developer first if it is behind.
5. Update WordPress itself when a new version is out.

Do not run several big updates at once on the live shop unless you have tried that same set on staging.

What should I test after updating?

• Open the home page and a few product pages.
• Add a product to the cart and go to checkout.
• Place a test order with a test payment method, such as FPX or card in test mode if your gateway has one.
• Check that the order email reaches you and the customer copy looks right.
• Check shipping and tax still work out correctly.
• Look in WordPress admin for error notices or failed scheduled tasks.

Only switch off Coming soon mode when all of these work. If something breaks, keep checkout closed and restore the backup.

Other monthly checks

• Make sure order and stock emails are still arriving and not going to spam.
• Remove plugins you no longer use.
• Check that your SSL padlock shows on every page and your domain is not close to expiry.
• Review who has admin logins and remove former staff.

What to do

1. Pick one day a month, for example the first Tuesday, and put it in the calendar.
2. Write down who does the work: you, your staff or an outside developer.
3. Follow the backup, update and test order steps above every month.
4. When a security update for WooCommerce or your payment plugin appears, apply it within a day or two.

How SyncTech can help

If you would rather not do this yourself, our ecommerce website maintenance service in Malaysia covers backups, updates and checks after each update. Planning a new shop or a rebuild? See our online shop website design page.

Source and credit

We are sharing this guidance from WooCommerce. This summary is written by Synctech in our own words.

• How to update WooCommerce, WooCommerce documentation: https://woocommerce.com/document/how-to-update-woocommerce/
• Testing orders, WooCommerce documentation: https://woocommerce.com/document/testing-orders/ Retrieved 3 November 2026. WooCommerce and WordPress are trademarks of their owners. Synctech is not connected with them. This is general information, not legal, tax or financial advice. If anything here is wrong, email support@synctech.com.my and we will correct it.