If the respective websites opt for safe and secure services like secure plugins and themes, WordPress is secure. WordPress core is maintained by a top-notch security team, making it secure if upgraded to the latest versions. But only legitimate and popular plugins with their updated versions are secure.