How to secure WordPress
These days it's common for attacks, against the WordPress admin dashboard.
STEP 1: Update WordPress Files and Plugins to the latest version
STEP2: Remove All unwanted thmes and pluguins
STEP3: Install WordPress security plugin - iThemes Security (formly Better WP security)
STEP4: Tweak Security settings with iThemes Security plugin
STEP5: Change Admin url from /wp-admin to something elese. (eg. http://yoursite.com/mywp4524p)
STEP6: Select a Strong password to your WordPress admin area.