Forum Moderators: mack
The most secure WP sites are those which use no, or only a few plugins. Plugins are mostly developed by third parties and these third parties often have more sloppy coding practices than the WP core developers. Most third party developers also have less efficient bug-tracking and updating procedures.