Is your website produced using Drupal? Or WordPress? Do you know? Do you discuss this and the security of your website with your web developers?
Drupal is a similar product to WordPress and is used to create website, so any security update to a product that sits there on the web waiting to be attacked is important.
Drupal Releases Security Advisories to Address Multiple Vulnerabilities | CISA
If you cannot answer the opening questions then – have a read of this:
How much are you relying on your web designer to protect your reputation?
Clive Catton MSc (Cyber Security) – by-line and other articles