WordPress Security Myths Debunked