WordPress has good amount of security features but only few know how to use them. The weak link always tend to be the easy to guess passwords. Sometime people just migrate the local copy as it is and forget to change the passwords post migration. https://thecyberexpress.com/weak-wordpress-passwords-hit-pla...