Unpatched WordPress installations rife with malware !!!!

[INDRANIL]

Yesterday the WordPress team gifted writers with the release of version 3.2 of the open source blogging platform. While their focus was rightly on all of the cool new features and enhancements their community will enjoy.

The biggest announcement was the new minimum version requirement for PHP and MySQL: WordPress 3.2 will only run on web servers using version 5.2.4 or greater of PHP and version 5.0.15 or greater of MySQL.

This is no doubt good news from a security perspective. PHP 4 hasn't received security updates since 2007 and MySQL 4 hasn't been updated since 2008. If your host doesn't meet WordPress's new requirements, it is time to ask some serious questions about their security procedures to ensure your site remains secure.

As big a step forward as this is, however, it doesn't bring web hosts nearly close enough to versions of PHP and MySQL that could be considered safe to use. And clearly, this doesn't change anything for those users and hosts who aren't in the habit of updating their WordPress to begin with.


Read More & Source .

[Raymond]

For web software/script, it is always advisable to use the latest version.
This is why some web software/script uses the subscription based licensing, for example, vBulletin :P

[INDRANIL]

Hmm You have better experience with vBulletin eh?? .