When we talk about Information Security, many things come into mind and people tend to use CMS to be clear on security as CMS people do the job for you, in terms on hashing passwords, encryption etc. But how foolproof can it be? Like WordPress. I have a project in which a lot of financial information of user will be stored and i opted out for WordPress, but i doubt my selection as it's open source. But when i see websites like ebay, cnn and other sites build onto it, i am little confident. But really, is WordPress really best CMS out there to create something complex which involve a lot of security, like why people use oracle financials? Am i good to use wordpress?