I am very dependant on many plugins. Almost all my WordPress site that use many plugins experience being attacked by url injection, adding lots of index paged written in korean, chinese, etc.

My other wordpress sites that are just for blogging, without any additional plugins, stay healthy.

I think Ciprian and Brian are right.