Being as PHP is open source, that means that anyone can have access to it and search for vulnerabilities within. These vulnerabilities can then be used to exploit a site. But don't be too alarmed by this fact. Developers are always improving its security and integrity. It's important to test PHP updates to ensure it works with the other components of your WordPress website.