Yes—when it is properly configured and maintained. Most security issues result from outdated plugins, weak passwords, or neglected updates rather than WordPress itself. Regular maintenance significantly reduces these risks.