User hack

User accounts are been registered on my account almost daily, they are all spam and coming up as subscriber authority levels.

My blog is https://www.seowizz.net

Do I have to change permissions on certain files or is there a plugin I can use to stop this?

Thanks