Although check this search out: http://osvdb.org/search?search[vuln_title]=wordpress+-plugin+-theme&search[text_type]=titles http://osvdb.org/search?search[vuln

Although check this search out: http://osvdb.org/search?search[vuln_title]=wordpress+-plugin+-theme&search[text_type]=titles http://osvdb.org/search?search[vuln_title]=wordpress+-plugin... And my filtering isn't that thorough, a number of results are still in plugins or themes. My point is that the majority of WordPress problems are not actually WordPress problems but problems with the enormous set of third-party content produced for it. WordPress's security engineering is generally pretty good now, but the plugins are very much a mixed bag.