In reply to Samuel "Otto" Wood.

nick6352683,

If the current version of WordPress was 100% secure. No bugs whatsoever then Otto, Mika and the rest would be out of their jobs.

If a piece of software is 100% secure then no need for people to fix it since it is 100% secure.

No matter how much Otto, Mika and rest look at themes/plugins...something will go oops once a while.

For the amount that it costs to get WordPress, it's themes and plugins....the security is awesome.

MOST SECURITY ISSUES ARE DUE TO THE STUPIDITY OF THE OWNERS/ADMINS AND NOT WORDPRESS ITSELF.

Week passwords, username: ADMIN, easy to guess username/password. having unupdated theme/plugins, and so forth.