Recently Matt Mullenweg wrote a blog post explaining why a strategy of keeping up to date with WordPress upgrades and patches is a good idea: How To Keep WordPress Secure

All our OM4 websites run on WordPress. Each time a WordPress upgrade or patch is released, we assess it and apply it.

When security patches are released, we apply them promptly.

With larger upgrades, it might take us a bit longer to make sure any required changes are integrated to enable new functionality. Some upgrades introduce a lot of new functionality that require changes to theme files. Sometimes plugins aren’t compatible with updates and we have to co-ordinate the update with plugin updates to keep everything working together.

We’ve been doing this ever since launching our first WordPress site, and plan to keep doing it. As Matt says, there are no guarantees, but it is a good strategy for keeping your WordPress website secure.

Keeping WordPress Secure