Which open source CMS has the least number of vulnerabilities?

Question

CMS

There is a choice of CMS for a large commercial project. To create a bicycle, it seems to me, is not very reasonable.
But how much you can rely on the security of an open source CMS is hard to say.
It is also important that the CMS functionality is at a high level.
Plugin vulnerabilities are not considered. Question exclusively on CMS.
Share your thoughts, who knows.
Thank you.

Answer 1

Wordpress - hole
Drupal - hole
joomla -
no hole

Answer 2

Well, WordPress, for example, has implemented forced automatic engine updates related to security (and any critical updates in general). And they are pretty regular. And now they are generally preparing for the release of 4.4.
It seems to me that the more often the engine is updated, the fewer holes it has. At least, judging by the vp changelogs, holes are closed there regularly.

Answer 3

Drupal or Wordpress. Holes are closed immediately. But plugins (modules) Drupal IMHO better. In general, I would take a better framework, such as Laravel.

Answer 4

A big com project, this is not a question (answer), which tasks are more specific. Do it on statics, no locks, no vulnerabilities.

Answer 5

I would recommend WordPress. Updates there are automatic, no need to reload the site like in Drupal