DunDidIt2X
Elite Member
- Mar 22, 2012
- 2,863
- 2,432
Source: http://thehackernews.com/2017/02/wordpress-hack-seo.html
Read the linked article. Wordpress worked with security teams and updated Wordpress a week before releasing the news. So the question is really: Why did you not update your Wordpress installation when your administrative page notified you that there was an update?Why dont Wordpress themselves update it?
While Wordpress can auto update, sometimes the updates break the sites - especially if a plugin is not compatible with the new version of WP. Therefore, many operators turn off the auto update. I do. But as soon as the admin panel notifies me, I download the new version and test it against the plugins I run singly and in total combination. Sometimes all of the plugins are compatible with each other if loaded only in a certain order, sometimes one plugin or the other is not compatible at all, and sometimes minor tinkering is needed for a given plugin.I think wordpress automatic updates are enabled after v4.7. My sites were auto updated.
There is a plugin available for enabling auto updates - https://wordpress.org/plugins/automatic-updater/
This article states that auto updates was introduced in v3.7 - https://www.siteground.com/tutorials/wordpress/auto-update.htm