via wpwhitesecurity.com => original post link
WordPress auto-updates can be quite a divisive topic. When enabled, auto-updates can ensure that you get the latest updates as soon as they become available. This can help you mitigate certain risks, such as security holes, as fast as possible. Yet, untested updates can break your website – so what’s the deal? Should auto-updates be enabled or disabled? The answer is not so simple.
The case for enabling auto-updates
Outdated software remains one of the leading causes of WordPress security breaches. Practically all software comes with bugs – which is one of the reasons why developers release updates every now and again. Some of those bugs could very well present a security risk or have a software vulnerability. While it has to be said that reputable developers will certainly test for vulnerabilities such as Cross-site Scripting before releasing software to the public, there are no guarantees that any software is ever free from security holes – including WordPress itself.