Jason Cosper writes on the WP Engine blog that people need to stop saying WordPress is not secure, because it is. WordPress Core is rarely cause for security concerns, and hasn’t been for some time. However, due to WordPress’ massive scale of adoption, we all do need to be careful about what else we put on our installs that may potentially be insecure – but Core is never likely to be the point of vulnerability.