In reply to Miroslav Glavic.

Cars are not dangerous. It's only transport trucks, speeders and drunk drivers that cause road fatalities.

WooThemes, Elegant Themes, EWWW Image Optimizer, Yoast, WordPress ImageMagick integration have all faced major security vulnerabilities in recent memory. All of those companies include serious WP professionals on staff. WordPress is not a religious question but an issue for grown-ups running businesses on what is an inherently dangerous platform, the open internet.

You are aware the WordPress itself is porting security fixes to versions as far as back as 3.7.14 (last updated May 6 2016)? The whole argument that one has to run the latest version of WordPress every minute is just propaganda to force business clients to spend more money on their websites (as almost every major upgrade requires lots of testing and a fair amount of troubleshooting on sophisticated sites).

Sticking one's head in the sand doesn't make a problem go away. If WordPress/Automattic won't take security and stability seriously, someone else will (like Jeff Bezos and Arc for instance.