“Anyone who has managed WordPress sites for longer than a few months knows how the cycle goes: Upgrade PHP. Upgrade and reconfigure broken plugins. Find replacement plugins for those that no longer work. Upgrade WordPress. Upgrade PHP again. And the cycle continues, ad nauseam. ... An upgrade / update cycle is true of all tech stacks, to be fair, but because Wordpress is server-based, not updating can be a severe security risk.”

https://cloudcannon.com/blog/why-the-web-is-turning-away-from-wordpress/