All websites on the internet are vulnerable to hacking attempts. The reason why WordPress sites are a common target is because WordPress is world's most popular website builder. It powers over 41% of all websites meaning hundreds of millions of websites across the globe.In general plugins have problems and create security gups.Always to use a security plugin, for me WordFence is the best.