Where I can find a list of WordPress security risks?

You can check the WPScan Vulnerability Database

The vulnerabilities are classified in ‘WordPress’, ‘Plugins’ and ‘Themes’ at the top bar, from 2014 on.

Cheers

tech