This year, in June, there have been already 4 Security Releases for WordPress. To compare, there have been 5 Security Releases for the whole year of 2016!

Here the link to the security log of WordPress:

You should always update WordPress and all your plugins. When a new version of WordPress or of a plugin is available, you will receive an update message in your WordPress Admin Screens.
For more information:

Did you know that, according to WPBeginner, 83% of hacked WordPress sites hadn’t been updated? According to’s stats, WordPress sites are frequently hacked due to “outdated versions of: PHP, WordPress, themes, or plugins”. says, “by not updating, you are leaving your sites buggy and open to being hacked.” Finally, WordPress founder Matt Mullenweg begs users to update WordPress in How to Keep WordPress Secure. (Source: Optimwize)

Last but not least: Be sure to do a backup of your website before doing an update! (files & database)