After doing some #pentesting of a #wordpress #website , I am surprised they do not get #hacked way more often to be honest: https://portswigger.net/daily-swig/wordp.. The entire use of the #database and lack of #caching by default seems to be quite an issue. You can #ddos an otherwise #static #website entirely off of the #internet quite easily.