This is what I think the main problem is. There are so many plugins and many (most?) are poorly written. Since most users don't know how to code beyond maybe some html/css, they just search for the functionality and install whatever matches. That can typically land you with a WP site running 10+ plugins, each with their own security / bug liabilities.
WP is fine by itself and there are lots of good plugins but like anything user managed, it gets blamed regardless of what's causing the problem.
Comments
This is what I think the main problem is. There are so many plugins and many (most?) are poorly written. Since most users don't know how to code beyond maybe some html/css, they just search for the functionality and install whatever matches. That can typically land you with a WP site running 10+ plugins, each with their own security / bug liabilities.
WP is fine by itself and there are lots of good plugins but like anything user managed, it gets blamed regardless of what's causing the problem.