Hacker News new | ask | show | jobs
by ValentineC 623 days ago
> What's the risk? You own the code, and you aren't pre-committed to updating to any new versions in the future.

This isn't a static website we're talking about — WordPress is probably one of the most attacked web software in the world given its footprint.

WordPress doesn't do LTS releases or backports either.
1 comments
Vuska 622 days ago
WordPress 3.7, which introduced automatic updates, received security backports all the way to 3.7.41. From 2013 to 2022. 4.1 and above are all still receiving them.
link
johnchristopher 622 days ago
Doesn't WordPress officially only support the two latest minor version release though ? I can't find an official source at the moment but a quick googling seems to confirm that.
link
ValentineC 622 days ago
https://wordpress.org/documentation/article/supported-versio...

> The only current officially supported version is the last major release of WordPress. Previous major releases before this may or may not get security updates as serious exploits are discovered.

> …

> Security updates will be backported to older releases when possible, but there are no guarantee and no timeframe for older releases. There are no fixed period of support nor Long Term Support (LTS) version such as Ubuntu’s. None of these are safe to use, except the latest series, which is actively maintained.

link