Using weak passwords and ignoring plugin updates are among the most common WordPress security mistakes affecting small business websites.