• 10 days

    For all its flaws and spaghetti code vulnerabilities in WP core have been really really rare. It’s usually some plugin that’s vulnerable. And automatic updates take care of timely patches.