Install the how to fix hacked wordpress Firewall Plugin. Stop and this plugin investigates requests with WordPress-particular heuristics that are simple to recognize most obvious attacks.
Basically, it will all start with the fundamentals. Try to use complex passwords. Use numbers, letters, special characters, and spaces and combine them to create a password. You could also use usernames that aren't obvious.
In case you ever want to migrate your site elsewhere, such as a new web host, you'd be able to pull this off without a hitch, and also without having to disturb your old site until the new one was in place and ready to roll.
Can you view that folder Imagine if you visit WP-Content/plugins? If so, upload this blank Index.html file inside that folder as well so people can't see what plugins you have. more information Because if your current version of WordPress is current, if you are using a plugin or an old plugin using a security hole, then someone can use that to get access.
Change admin username and your WordPress password, or your password, frequently and collect and utilize other WordPress safety tips to keep hackers out!