there are a lot of really bad plugins that are used. Also there are a lot of really bad admins who have out of date versions that are misconfigured.