hackers go after low hanging fruit 99% of the time. it's the reason why there are so many wordpress scanners out there.