WordPress is a relatively secure product. However as with anything nothing is 100% fool-proof. Unfortunately with widely-used products such as WordPress once an exploit is found it is widely available on 0-day exploit sites and a lot of hackers will trawl the web to take advantage of this exploit.
However staff at WordPress are very quick to patch these errors which is a plus. Also the installation of plugins coded by the non WordPress team can be open to exploits and is the most common way a hacker finds his way in. If there is an issue an SSL certificate will not stop the site being hacked. Will just mean that an form data will be passed between locations with better encryption. I hope this helps.
3
solved Can wordpress hacked easily or is it about any site? What was the reason? [closed]