Where are all these HN posts you're talking about Wordpress installs being hacked?
Not saying it doesn't have some risks / for a very long time, but there aren't posts on here about it regularly.
There are more dating 5 and more years ago, but I didn't link them here. It seems I saw at least twice as more similar news for WP in recent years, but maybe these links were in HN server cache or something and with no comments so are not shown in search.
[1] https://news.ycombinator.com/item?id=31584788 Researcher goes public with WordPress CSP bypass hack
[2] https://news.ycombinator.com/item?id=32561198 Hacked WordPress – over 17,000 spam links injected post compromise
[3] https://news.ycombinator.com/item?id=5702570 Tell HN: Bots are Constantly trying to hack your Wordpress Sites
There are more dating 5 and more years ago, but I didn't link them here. It seems I saw at least twice as more similar news for WP in recent years, but maybe these links were in HN server cache or something and with no comments so are not shown in search.