Right, because no other language is hackable.
https://github.com/rails/rails/commit/b83965785db1eec019edf1...
Should languages be required to ensure the security of the code produced for them?
IMHO this is more of a complaint about the security of Wordpress, not the PHP core. People love to bring up phpBB or Wordpress in these discussions, but there are many, many more systems using large-scale PHP about whose security you just don't hear, because they are coded by professionals who know how to produce secure code in PHP.
I think I could, pretty often at least:
http://duckduckgo.com/?q=wordpress+%22hacked+by%22