In reply to Steven Gliebe.

Keeping WordPress & plugins updated only helps when the person responsible for the code is responsible. ie: You update a plugin today, but it's only secure if the writer took security into account.