I like WordPress, but I'm seriously starting to think about stopping hosting client setups, unless they commit to updating it within a few days of every security update.
Partly because when they get hacked, guess whose fault it is? The host's, obviously 😆