Wordpress has improved a lot since version 3, and most of the vulnerabilities you see for it now require some kind of privilege escalation or don't really give

Wordpress has improved a lot since version 3, and most of the vulnerabilities you see for it now require some kind of privilege escalation or don't really give the attacker a whole lot to work with (http://www.cvedetails.com/vulnerability-list/vendor_id-2337/product_id-4096/ http://www.cvedetails.com/vulnerability-list/vendor_id-2337/...). And Wordpress handles updates remarkably well, including automatically installing security updates in the background. I previously hated Wordpress because it was a source of so much trouble on the web, but now I sort of grudgingly appreciate it. I still don't enjoy having to work with it on occasion for clients, but it doesn't make me grind my teeth anymore.