Unfortunately, WordPress is the most targeted platform because it has a massive user-base and it is an open-source. But, the problem is not the platform itself, but the third-party plugins. 98% of WordPress vulnerabilities stand in their plugins and the most popular vulnerability types are cross-site scripting and SQL Injection.