WordPress Security - is it really that bad?

WordPress' security reputation is often criticized due to its low barrier of entry and reliance on plugins and themes, which generate most vulnerabilities. Despite this, the core WordPress CMS is relatively secure, and recent years have seen significant improvements in finding and addressing security issues. The market is also evolving, with larger companies investing more in security. Areas that need attention include better visibility for closed plugins and security researchers, and cleaning up some legacy code quirks. Overall, while there is still work to be done, the security landscape for WordPress is improving.