This is something:
Something upwards of 40% of all Internet websites use WordPress blogging software. WordPress is written in the PHP programming language. Because PHP has a lot of quirks, and because just about any wanker can come along and crap out a solution to any given problem, WordPress installations have traditionally had security flaws. That makes WordPress installations subject to a lot of shady activity.