WordPress is insanely open to attacks, word of warning. My company uses it and every single day we get pounded by Ukrainian hackers trying to brute force their way in.