Well there's your problem

from here

I genuinely don't understand why people keep using WordPress. Whenever I hear about a vulnerability discovered in a blogging ecosystem, it's almost always WordPress. It's almost as if the potential for compromise doesn't matter in the real world.