TBF, some of it is structural: if you're the most popular anything on the internet, you'll be the most attacked and the most exploited, and hence the most exploitable.
That's not really true.
Edit: wow that's a lot of downvotes! I'm surprised people can't identify a trivial reasoning failure.
Yes and Wordpress is a pile of garbage.