The most common causes of website hacks is running old versions of your CMS (WordPress, Drupal, Joomla, etc), old or unsupported plugins/themes, or shoddy customizations done by another freelance programmer. That said, most CMS systems have core vulnerabilities intentionally in place because plugging those security vulnerabilities is either a different process for different hosting platforms or will likely cause side effects with a common collection of plugins and themes. If you’re afraid to run updates because it can break things as well or don’t know what to do, we can also maintain that for you with our ongoing security and maintenance plans.