We update all Plugins and WordPress Core Software once a month, either at the end of the month or at the beginning of the month. It all depends on how busy we are, but we make sure to do it within a 30 days timeframe.  We are registered with a security company, which send us updates about vulnerabilities in WordPress or Plugins, in this case we will update all website softwares as soon as possible.