We see that millions of wordpress websites hacked often and all these are mainly becase of simply ignoring the updates.  We strongly advise you to update your WordPress and all plugins to the latest version as soon as it is available.

Best practices to keep a wordpress website secure

• Start with latest version
• Install only required plugins
• Delete all unused plugins
• Delete all unused themes
• Use htaccess rules to block spiders and attacks
• Use security plugin and rename wp-admin

Consult with a hosting expert

Please see the release notes of various versions.

Version 4.9.8 addressed 46 bugs.For more information, see the release notes.

Version 4.9.7 addressed some security issues and fixed 17 bugs. For more information, see the release notes.

Version 4.9.6 addressed 18 bugs. For more information, see the release notes.

Version 4.9.5 addressed some security issues and fixed 28 bugs. For more information, see the release notes.

Version 4.9.4 addressed 1 bug. For more information, see the release notes.

Version 4.9.3 addressed 34 bugs. For more information, see the release notes.

Version 4.9.2 addressed some security issues and fixed 22 bugs. For more information, see the release notes.

Version 4.9.1 addressed some security issues and fixed 11 bugs. For more information, see the release notes.