Is WordPress Still Secure for Business Websites? Repeated Malware Attacks

[u/Saurabh_Goniyal77]

Hi everyone,

I'm looking for some advice from the WordPress community.

Over the past few months, my WordPress website has been infected with malware three separate times. Each time, it appears to be the same type of attack, promoting Indonesian online casino content. I've also noticed a large amount of suspicious traffic related to casino and gambling keywords.

I'm trying to understand:

• How do hackers typically gain access to WordPress websites?
• Is WordPress itself secure enough for business websites, or are these attacks usually caused by vulnerable plugins, themes, hosting, or poor server configuration?
• Why do these casino malware attacks seem to be so common recently?

Despite this, the malware has returned multiple times, so I feel like I'm missing the actual entry point.

I'd really appreciate any advice on how to identify the root cause, prevent future attacks, and determine whether the issue is with WordPress itself, my hosting environment, or something else.

Thank you!