WordPress itself is fundamentally secure and extremely stable. The vast majority of security issues with WordPress sites are caused by avoidable errors: failing to update WordPress core, using unvetted plugins, and using insecure passwords.