A CMS is a huge security risk unless it is regularly maintained and updated. Although most CMS release updates/fixes/patches regularly, widely used content management systems generally invite more hackers than websites that do not use a content management system or encrypted websites.