If you are wondering what the most common vectors of compromise with WordPress based sites, the following page is an eye-opener.
- WP Scan: WordPress Vulnerability Statistics
Here are statistics for 2022:
The moral of this graphic: choose your plugins carefully.