Linked – WordPress bloggers ‘strongly encouraged’ to immediately apply security update
If you don’t have automatic updates turned on your self-hosted WordPress sites, you should probably make some time to get them updated. Nothing like having your site hacked because you skipped an update that patches vulnerabilities!
And while you’re at it, go ahead and turn on automatic updates. It won’t do major release updates, you’ll still be given the choice of when to do those updates, and the backup the database beforehand, but these smaller security fixes will get applied quickly!
https://www.grahamcluley.com/2016/09/wordpress-bloggers-strongly-encouraged-immediately-apply-security-update/