Start off by checking your plugins against somewhere like https://patchstack.com/ (or even using their automated service). Source: over 1 year ago

Security is actually very simple, realize that 99% of security issues with wordpress are due to plugins. So what you want to do is install good ones and keep them up to date, you can also install something like https://patchstack.com/ to warn you if a plugin you have installed has a vulnerability. Other than this, use a strong password and change the admin user and use a 2FA plugin with google authenticator. You... Source: over 1 year ago

If only people understood this, a free solution like patchstack.com coupled with good plugin hygience, strong passwords and 2FA. And you're 99.98% safe. Source: over 1 year ago

You can connect your sites with Patchstack for free to be notified when some new vulnerability is found in plugin/theme/wordpress version that you use. You can also check the vulnerability database manually here: https://patchstack.com/database/. Source: almost 2 years ago

People have to understand that 98% of wordpress security issues are due to plugin vulnerabilities, if you monitor for plugin vulnerabilities in the plugins you use, maybe using a something free like patchstack.com and then use a free firewall plugin like BBQ firewall or Cloudflare + Using 2-FA with a password manager, changing the login URL to avoid bots all together. Source: about 2 years ago

May use a combination of .htaccess and robots.txt. Read for more examples here. For a first line of defense would go with CloudFlare, too. Also for bots that scan for vulnerabilities, etc., consider this. Source: almost 3 years ago

Consider CloudFlare WAF (Pro subscription), and/or hardening your security with an established sec plugin like WordFence, Sucuri. (I personally prefer a lighter plugin.). Source: almost 3 years ago

Against hackers, I fancied this plugin instead of Wordfence. Source: almost 3 years ago

This is a free plugin that takes a different approach to security. Source: almost 3 years ago

After a successful clean up, install a security plugin to shield from future attacks. I personally prefer a more lightweight one like this. Source: about 3 years ago