WordPress plugins and themes vulnerabilities statistics for 2017. The statistics were derived from our up-to-date WordPress Vulnerabilities Database. The total number of vulnerabilities decreased by 69% in 2017. Cross-Site Scripting (XSS) has been at the top of the list. 2017 has also seen a substantial rise in SQL Injection vulnerabilities. WordPress released 8 security updates in 2017 year. The most popular ecommerce plugin, WooCommerce, is the most popular plugin for WordPress.com (3,000,000+)”]
Source: https://securityaffairs.co/wordpress/68114/hacking/wordpress-plugins-themes-flaws-2017.html