WordPress is a well maintained, secure platform. The themes and plugins you use may not be though. It is not easy to keep up with all the vulnerabilities that are found in plugins and themes all the time. WPVulnerability can help. It is a handy plugin that checks your current version of WordPress as well as themes and plugins you are using.
This plugin simply lets you know if there are vulnerabilities in your code. On the Site Health Status page, you can see all the issues and the action you will have to take to deal with potential security issues. You can also change notification settings in the backend.