I was facing the same issue for my one of client websites https://conferoassociates.com/ and researched over WordPress forum. I tried a security plugins
iThemes Security
to protect the website and till now it’s safe.
I have taken few necessary steps to protect that website like
- Protected login area “Changed wp-admin path”
- Taking backup of complete database in regular manner
- Activited email alert while editing/renaming/uploading any file on server
- Malware scanning is enabled
- Enabled Brute Force Protection
- Enabled the hide backend feature
- Enabled strong password enforcement
The good thing with WordPress is that there is always a Plugin for all your needs, but the second side of the coin is that it is very insecure so before activating any Plugin please go through the instructions and take complete backup of your database.
Hope It Helps.
Thanks
Raghwendra
