In reply to Selvam.

yep, definitely better to wait for the vulnerability to be used to hose yoiur site than having to deal with an upgrade.