On December 1, 2022, versions 3.7-4.0 will [no longer receive security updates](https://wordpress.org/news/2022/09/dropping-security-updates-for-wordpress-versions-3-7-through-4-0/). The white paper should be updated to reflect this.