InfoSec. Every CMS is a liability. Patch it or replace it. There is no third option.