We like InfiniteWP because it's free and we can host it ourselves (we've had no need for their paid addons), but there's also other solutions like MainWP, ManageWP, WP Remote, iControlWP, CMS Commander, etc. I think most (if not all) of those are hosted and paid / free trial.
I wonder how a less tech-savy person would have resolved that. Even being tech-savy, I had to ask someone for help.
Updates of core and plugins are always very scary to me.
As soon as something major breaks by those auto-updates, the trust is over and a lot of users will disable it. That would be a shame indeed, because besides a couple of WSOD's some users may experience, it's an extremely powerful feature.
I've personally no idea, but I hope you asked yourself those questions.
What I do to fly under the radar of many of the bots and automated scripts targeting wordpress sites is using a modern wp framework: roots bedrock[0]. This gives you a convenient time windows to update wp when you have the time (although with bedrock it is really easy with a couple of commands)
The email seed:
Subject: [{my website} Wordpress MU] WordPress 4.2.2 is available. Please update!
Please update your site at http://{my websites url}.com to WordPress 4.2.2.
Updating is easy and only takes a few moments: http://{my websites url}.com/wp-admin/network/update-core.php
If you experience any issues or need support, the volunteers in the WordPress.org support forums may be able to help. https://wordpress.org/support/
Keeping your site updated is important for security. It also makes the internet a safer place for you and your readers.
The WordPress Team
I have the following plugins installed: All In One SEO Pack, FeedWordPress, Github Ribbon, Hello Dolly, Revision Control, Unfiltered MU, WordPress Importer and WP-Polls.
Maybe it originated from one of them?
This is a critical security release. The cross-site scripting vulnerability lets a commenter compromise your website.
This is clearly opinion, and should be taken as such, but I absolutely loathe Wordpress' admin interface. I'm sure at some point it was a nice, easy user interface but those days have passed. Anytime I have the misfortune of being thrown into a Wordpress backend I have no idea how to get anything done.
