Wordpress is not as insecure as people think, it's only insecure when you start loading unknown plugins and such (which it seems a lot of people do do). My wordpress site has been up for about 4 years without me updating it or doing anything at all to it... and somehow it still hasn't fallen down.
Link to your blog? I'm certain it's vuln to xmlrpc vulns if you haven't updated it.