The most vulnerable platform is WordPress. If you are looking for a very secure platform we recommend custom development. Because of its unique code, it leaves almost no open door for common attacks.