> The fact that you even mention that you get security updates "every morning" is an indication of how much work keeping a WordPress site secure can be.
Sorry for the confusion; I mean if there's a WP/Plugin/Theme update, I get notified every morning so I can go in and update (if needed.)
I think it is just wordpress' ubiquiti that has made it a security issue though. Attackers are quick to build exploit bots the moment a new vulnerability is found and they scour the web for unpatched sites.
So if you don't stay on your toes, you will get pwned sooner or later with a wp site.