Superb article on WordPress security examining the websites of the US presidential candidates (most of which, interestingly, are built on WordPress) and picking apart the security holes that a majority of them have.
http://resources.infosecinstitute.com/doesnt-any-presidential-candidate-know-how-to-secure-wordpress/
http://resources.infosecinstitute.com/doesnt-any-presidential-candidate-know-how-to-secure-wordpress/