1/3 of critical WordPress plugin vulnerabilities never patched
bleepingcomputer.com