In reply to Chuck.

Just to be clear, 4.7 fixed a number of security issues too so remaining on 4.6.x isn't really keeping you 'safe'.