Will there be security updates for WordPress 4.9.9

According to Codex:

The only current officially supported version is WordPress 5.0.3.
Previous major releases before this may or may not get security
updates as serious exploits are discovered.

So, as you can see, the official version is that only the newest version is supported and only that version guarantees that you’ll get security updates.

But if you’ll see at history, most of the times, previous version also gets security updates.

On the other hand, if you want to postpone this update because of Gutenberg (Block Editor), then you can always use this question and disable it: How to disable Gutenberg editor?

Related Posts:

  1. Why does WordPress need my private ssh key to update?
  2. How can I easily verify a core or plugin update has not broken anything?
  3. Is WP vulnerable when updating plugins or themes?
  4. Why my plugins are updating automatically?
  5. Are major WordPress updates mandatory for security?
  6. Background Updates Not Happening
  7. How to redirect all HTTP requests to HTTPS
  8. What’s the best approach for generating a new API key?
  9. Simplest two-way encryption using PHP
  10. How does the SQL injection from the “Bobby Tables” XKCD comic work?
  11. how fix “this certificate cannot be verified up to a trusted certification authority”
  12. How can bcrypt have built-in salts?
  13. Getting a List of Currently Available Roles on a WordPress Site?
  14. What’s the easiest way to stop WP from ever logging me out
  15. Prevent access or auto-delete readme.html, license.txt, wp-config-sample.php
  16. How safe / sanitized is wp_insert_posts()?
  17. From a security standpoint, should bloginfo() or get_bloginfo() be escaped?
  18. Why are passwords exportable as plain text in WordPress?
  19. What’s the difference between esc_* functions?
  20. How to set up fail2ban with WordFence?
  21. Is there a way to force ssl on certain pages
  22. What is the purpose of having a token in cookies?
  23. How to remove “Connection Information” requirement on localhost install of WP on MACOSX
  24. How is password strength calculated?
  25. Regular security checks – what steps should be included?
  26. What are the pros and cons of using a custom front-end to retrieve content from a WordPress back-end
  27. WordPress “Site Health Status” trust it or myself for its security advice?
  28. Do Cookies Need to be Sanatized Before Being Saved?
  29. Disable external access to REST API Endpoint
  30. What is the wp-includes/certificates/ca-bundle.crt used for?
  31. Do you need to escape hard coded plain text?
  32. Encrypt emails?
  33. Garbage in beginning of wp-config.php – was this WP installation compromised?
  34. WordPress salts set in config and database
  35. Disallow file edit not preventing plugin install
  36. How to secure WordPress XMLRPC?
  37. What is the relationship between cURL, WordPress and cacert.pem?
  38. How can I find security hole in my wordpress site?
  39. Does WP show me if I’m logged in from multiple locations?
  40. Is it necessary to use esc_url with template tags such as get_permalink?
  41. How to prevent bot or someone to modify any file automatically?
  42. HTTP Security Headers in wp-config
  43. WordPress Malware Problem help! [duplicate]
  44. Restrictive File Permissions
  45. Why are xmlrpc.php and wp-cron.php being called so often?
  46. Using esc_html with HTML purifier and CSSTidy: Overkill?
  47. wordfence scan warning on W3 Total Cache [closed]
  48. Securing a multi-user permission structure
  49. Is default functions like update_post_meta safe to use user inputs?
  50. No option “I would like my site to be private, visible only to users I choose” in Privacy Settings
  51. wp-config.php modified?
  52. Securing wp-config leads to sensitive information leak on wp-settings
  53. What’s the point of forbidding access to wp-config.php?
  54. How to save iframe tag into a post?
  55. wp-json and what data does it give away?
  56. my wordpress website is suspended [closed]
  57. Is wp_kses the right approach in sanitizing this string?
  58. Renaming install.php for security?
  59. WordPress Front end Form – Enable to Submit PHP Codes
  60. Malware installation during plugin update?
  61. Is it safe use wp_editor in public contact form
  62. Is WordPress MultiSite secure & how much can it scale? [closed]
  63. Which Versions of WordPress Ship with the Patched TimThumb?
  64. Use global variables or function that returns said variables for site-wide private-ish WP settings?
  65. How safe is current_user_can()?
  66. Is it safe to give wordpress directories ownership to www-data?
  67. How can I force a specific password?
  68. Do we need to escape data that we receive from theme options?
  69. Why does WordPress change a file’s permissions?
  70. Side effects of disallowing *.php requests in production environment?
  71. Outgoing new connection to linked Websites – why?
  72. My Site keeps crashing due to the wp-confg file being deleted
  73. Someone keeps changing my SITEURL (mysql injection or xss?) [closed]
  74. Who updates the wp-admin/core file?
  75. Replace domain in database
  76. Does this code indicate an exploit?
  77. What highest security brake with wordpress and static files?
  78. Spam in WordPress root folder
  79. Has anyone developed a anti-spam plugin to simply allow users to BLOCK whatever they wish to, but one that will also go easy on IP addresses?
  80. how to protect wordpress content from crawler
  81. Can WordPress admin user + database credentials be used to gain Cpanel or FTP access?
  82. Should I worry about SQL injection when using REST API?
  83. Links to root domain from search engines don’t work, but direct links and links from other referrers do
  84. How can I backup my site if it gets hacked?
  85. Cannot access wp admin of WordPress website (security plugin issue) [closed]
  86. Why are the latest visits to my website originating from my own website?
  87. How do I hide WordPress users from security scanning?
  88. wp-config.php file and code injection
  89. Able to go to WordPress admin even after deleting auth cookies from request headers
  90. FORCE_SSL_ADMIN affecting subdomains
  91. What is the best security $_POST method?
  92. Is WordPress ready for GDPR compliance? [closed]
  93. Should WordPress Add Options to Enhance Security or Leave it to plugin developers? [closed]
  94. Directory to store secure file
  95. How can I give someone server access to only duplicate and modify a site?
  96. How can I implement ansible with per-host passwords, securely?
  97. Why should I firewall servers?
  98. Does drilling a hole into a hard drive suffice to make its data unrecoverable?
  99. Can you alter the default wordpress strong password requirements?
  100. how to sanitizing $_POST with the correct way?
error code: 523