How to Keep Your Child Site Secure
If you build and maintain sites for customers, site security is a top priority. WordPress moved to a two-week schedule for minor releases after WordPress 5.0 was released. Each WordPress minor release will include security fixes. These same security changes are backported to older versions of WordPress (e.g., in the case of the 4.9.X branch, the security release would be 4.9.10). You need to set a minimum version of WordPress that you will support on client sites, no later than two versions. It is easier to keep the child sites updated to the most current version, rather than running a