WordPress core
Security releases applied promptlyWordPress ships security fixes in minor releases, as its security team explains, so we apply them within days. However, a major version waits until the plugins your site depends on have confirmed they work with it.