I work for a hosting company. On average, I’ll clean up at least 3-4 WordPress sites each month for our clients. Most of the time, they’re running on old versions of WordPress and have at least a dozen plugins going (half of them in need of updating).
Recently, I decided to go official and started K5 Web Security to help people on a larger scale. If you know of someone in need, send em my way!