I’m new, but I can definitely help you here!
I created a new site with no experience, hacked straight away!
Delete your old wordpress folder totally.
Create a new databaser with new name and password; make these hard
Okay, to give yourself some time, make the folder name of the blog something you made up; not just WordPress or blog.
Do not install with ‘Admin’ account, make something up.
Make a cracking password.
Next, have a look at htaccess files and create one that give no one permission to htaccess or wp-config.
Install some security plugins like Firewall , WP Security Scan, Login lockdown.
Take it from there and get some reading in! I’ve learned a lot this week.
Good luck