WordPress is generally considered a safe content management system. However, like any CMS, it can be vulnerable to attacks if you don’t invest in protecting your site. There’s no way around it: Websites that use WordPress are a popular target for cyberattacks.

This link will help you understand how to secure your WordPress site.

20 Steps to Secure Your WordPress Site in 2022 (hubspot.com)