"Readers keep asking me why I’m “against” WordPress. I’m not against WordPress. But I think it’s important, for anyone who cares about their web sites, to understand just what you’re getting into when you decide to host your own WordPress site. If you don’t vigilantly keep your installation updated to the very latest version, you stand a good chance of being exploited. This isn’t just a warning that the doors on your house have weak locks; this is coming home and finding your home burgled and your valuables missing."
Daring Fireball: Regarding WordPress and Security