We're using Wordpress for this website and it's a great tool for blogging.  However, it has security issues just like other open source applications.  The key is keeping it updated the second Wordpress releases a security update.