Most of us rely on a complex security plugin and a little bit of good luck. That’s not bad, but it’s not enough. You have to stay up-to-date on what’s new in the web-security world and learn WordPress security.