In case you’ve not seen, there was a new critical security release made for WordPress itself a few hours ago.
Most sites should update automatically within 12 hours – but since the release notes say that the security hole allows complete site take-over by an unauthenticated user (i.e. the worst possible kind of security vulnerability), I’d recommend updating right away. I’ve just updated around 100 sites!
David Anderson (founder, lead developer, UpdraftPlus)