WordPress is a highly secure CMS, provided it is properly managed, and updated! This includes regular updates and security patches, the use of strong passwords, restricted user access and naturally, the use of secure web hosting. One thing is for sure: an outdated WordPress website is a security problem, not the CMS system.