Comment by pale_rider

WordPress sites get hacked because the owner fails to update the platform or install 3rd party scripts/plugins without any sort of logical research.

This can be said about any platform, regardless of the language.