Drupal wins this round. WordPress’ many plugins can have vulnerabilities and be easily hacked, particularly if the website owner doesn’t update to the latest version or the plugin gets old. Or simply, hackers target WordPress because it is so popular. However, there is a paradox solution: install third-party plugins that increase your security.
One big difference between the two is how they handle mobile sites. Many of Drupal’s mobile themes run better off a subdomain, which creates two separate URLs to index in search engines i.e. http://www.yourdomain.com and http://www.m.yourdomain.com. WordPress doesn’t have this issue as most of its themes are mobile responsive.
Search Engine Optimization isn’t platform specific but there are a few tricks that make one better than the other. Both have SEO built into them. It has been said that Drupal was built specifically to be search engine friendly but WordPress has a multitude of plugins that can enhance this. Drupal’s pages tend to load faster due to its default caching features, and search engines put a preference on faster websites.Drupal is also able to handle larger amounts of content. A large volume of useful content is important for SEO.