Unfortunately, a lot of people forget to update their WordPress, their plugins and back up their websites regularly.

Outdated WordPress or plugins is what causes the biggest risk in security on a WordPress website.

When a security hole is discovered in e.g. a plugin, then it is quickly rumored among hackers, if you do not get your plugin updated to the latest version, where the security hole is closed, it is equivalent to leaving your home without locking the door