With security being such an integral pat of this industry I would get up to the most recent version ASAP. It's not worth risking client data over having a pretty theme. But I do understand the struggle, it's not fun changing all the customization and stuff.