Wordpress -- and its close friends Joomla and Zen cart -- hold a huge share of responsibility for infected and compromised sites on the internet. I understand

Wordpress -- and its close friends Joomla and Zen cart -- hold a huge share of responsibility for infected and compromised sites on the internet. I understand the desire that people have to be able to maintain their own website without any specific knowledge and without paying anyone else to do it, and I understand a good consultant's willingness to make that possible for a client. However, any time I've recommended Wordpress -- which is rarely -- it's come with the HUGE caveat that it's very vulnerable to attack, and that cleaning it up may get expensive. This has been true at least until version 2.9.2.