WordPress is a remarkably secure platform as long as you follow best practices and keep everything up to date. However, old plugins or themes can contain security vulnerabilities. In fact, this is often part of the reason why the developers ship updates.
It's easy to make sure WordPress is secure if you follow this weekly WordPress maintenance checklist. Make sure to edit it and swap out the names of our sub-domains with any you have that need checking in addition to the main site.