It was a false positive and the vast majority of the sites were actually running the latest version of WordPress.
Kwakuyiphutha elingamanga futhi iningi lamasayithi empeleni lalisebenzisa inguqulo yakamuva ye-WordPress.