https://blog.wpsec.com/best-practices-for-securing-your-wordpress-site-2/
Best Practices for Securing Your WordPress Site