WordPress has an unfair reputation for having poor security. It has been around for a very long time and is extremely popular, powering almost 30% of the web. As a consequence, a vulnerability or successful attack on a prominent website becomes big news – and WordPress becomes the scapegoat.
There are two key reasons that news of successful attacks are not representative of WordPress as a secure Content Management System:
