Responsibility of your WordPress security lies in the hands of WordPress core developers, but also in yours .