I've spent a few years at the height of the blog trend doing WordPress work. It's a very poorly designed app that has always put reliability/performance/security last and prioritized extensibility and low barrier of entry. Which is why they absolutely dominated the blog world but also why it's such a big fat juicy target.