There are significant challenges with security, and WordPress requires continuous upgrades and patching. Since it is the most common CMS, it is also the one most hackers give their attention. So many WordPress websites are left outdated and easy to breach. Unstructured and messy code can cause a lot of unexpected bugs.