No website in this world is 100% safe, no matter which platform it's built upon. WordPress as a CMS is entirely secure, but other determinants like your web host, theme, plugins, and custom code could make your site vulnerable. However, you can make your store more secure by using security plugins like WordFence and using SSL certificates to encrypt your traffic.