Is your website secure?
Cyberattacks do not pick targets by hand. They are automated and hit thousands of WordPress sites every day. If the site is not getting updates, it becomes an easy one.
A lot of businesses assume they will not be attacked because the site is not interesting. Outdated WordPress and plugins are used for spam, malware, and data harvesting anyway.
WordPress maintenance is not just clicking update. It is an investment in the business staying online.