Install the how to fix hacked wordpress site Firewall Plugin. Stop and this plugin investigates net requests with WordPress-particular heuristics that are straightforward to recognize attacks that are obvious.
Essentially, it will all start with the basics. Attempt to use passwords. Use numbers, letters, special characters, and spaces and combine them to create a password that is unique. You can also use.
You also need to place the"Anyone Can Register" in Settings/General to away, and you should have some sort of spam plugin. Akismet is the old standby, the one I use, but there are lots of them nowadays.
Imagine if you visit WP-Content/plugins, can you view that folder? If so, upload this blank Index.html file into that folder as well so people can not view what plugins you might have. Because even if your version of WordPress is current, if you are using an old plugin or a plugin with a security hole, someone can use that to get access.
Of course you can set up more plugins to make your store more user friendly like automatic plugin go to this website or share buttons. That's all. Your shop is up and running!