96% of WordPress security issues caused by plugins
wptavern.com