security will be a cat and mouse game From a security standpoint Wordpress is a trivial application because it's almost entirely read-only, except for the comm

security will be a cat and mouse game From a security standpoint Wordpress is a trivial application because it's almost entirely read-only, except for the comments. Making a plugin-architecture bullet proof is a different story, but as I understand it most of these issues affect the very core, i.e. a vanilla wordpress install. There is no excuse for their sorry state of affairs.