i have read about dozens of wordpress based sites that have come under some form of attack while i feel sympathetic for the victims i hate to say that most of the ways wordpress based sites are attacked can be prevented by simple measures that any site owner can accomplish