Many companies operate under the assumption that their WordPress sites are secure — and that couldn’t be anything further from the truth.