WordPress, when updated consistently and used responsibility, has no worse security than most other PHP CMSs and frameworks. WordPress has developed a bad repu

WordPress, when updated consistently and used responsibility, has no worse security than most other PHP CMSs and frameworks. WordPress has developed a bad reputation because of bad plugin authorship and bad theme authorship. If you are installing reputable plugins, keeping core up to date, and maintaining the standard best practices for hosting a PHP app, you're going to be fine. Source: Industry experience working for enterprise clients in healthcare.