WordPress site security was always a question for every site owner. The best practice is to follow software security . Here are some useful tips to secure a wordpress site.
- Start from the bottom. You should choose a good hosting service for a site, also configure your hosting properly.
- Plugin is one of the door for attackers. So uninstall all plugins that you are not using.
- Don't use plugins from an unrated author or who does not update his plugin.
- Backup your site regularly.
- Use two step verification process to log in.
- Always update theme when it becomes available.
However it is impossible to secure a site completely without any programming knowledge. But , if you follow above tips, it will minimize possible attract.