That is correct
It should do, but not knowing how it was installed it is difficult to say with any degree of certainty.
The host is not responsible for updating the software you install. What likely happened was years ago someone from your organization installed Word Press or whatever else they installed and never used it, it's still active if the files are there. Any software you install is open to potential security vulnerabilities. It's your responsibility to keep them up to date, updates to phpBB or anything else patch those vulnerabilities and your host does not install them.
Users browsing this forum: oBot, Yandex [Bot] and 20 guests