bad tactics when operating a WordPress site
WordPress is the most used online CMS on the web so it’s no wonder that hackers prefer to target WordPress sites. There are so many and many of them have not been updated for a while.
Even though WordPress itself is very secure, it needs to keep its core files, themes and plugins updated weekly or bi-weekly. If you leave a WordPress website running on autopilot for a few months, then it’s almost certain that a hacker will try to take advantage and exploit any weaknesses that are found.