Almost 30% of the internet is run by WordPress, including major players like the New York Post, Spotify and CNN. But of those sites, 70% are vulnerable to security hacks.