How many times has Google been hacked? It's not zero, but just because something is popular doesn't mean it has to get exploited. Repeatedly.

There is only one Google and it is operated by professionals. Who do not need to disclose the vulnerabilities that they find.

Wordpress is pretty much the exact opposite of that.