Essential WordPress Protection Why WordPress sites get hacked, and the plugins that close the holes.

Vulnerabilities

• If you use old versions of WordPress, you WILL get hacked. Use the latest stable version. Recent WordPress versions have plugged security vulnerabilities of the older versions.
• WordPress, because of its widespread use, is one of the internet's most popular targets for spammers and hackers. They are constantly seeking exploits to get into your WordPress site.
• A basic WP installation does not hide the admin login page. This enables brute force attacks on the password.
• There are plenty of reputable plugins available. Use WordPress recommended/reputable plugins. Do not use obscure plugins as they could contain malicious code.

WordPress Hardening Plugins

• Sucuri Security
• Wordfence
• All in One WP Security
• iThemes Security
• Shield Security

You can search for these plugins and install them via the WordPress Management Console.