@Elpie - We're not saying who can or can't use WordPress, we're simply saying that those people who don't update shouldn't be blaming WordPress, they should be blaming themselves.

Most releases aren't just one or two lines of code. The security portions maybe, but often times they fix other bugs, and make a few other tweaks while they're at it. The upgrade process is just a matter of a few clicks as long as you've done your job right ahead of time. Complaining about that strikes me as lazy.

This bitching about WordPress' security when a secure release has been out for nearly a month is ridiclous. If you install a home security system but don't arm it or lock your door, there's not much anyone can do.

If you manage sites that can't upgrade, then you're putting those sites at risk by using WordPress, plain and simple. Of course, the same would be true of any open source CMS. So in reality, the problem is with you and those sites, not the CMS.

If you or your clients or anyone else is going to use WordPress but not upgrade for any reason, they'll probably have to deal with being hacked.