My first step is not one you must take but I was helped by it. I had a good old fashion pity party. I cried and railed against the evil hackers (that where probably 13 and smarter then me) And I did before I started my site, what I should have done. And here is where I would like you to start also. Learn hacked. The attractive thing about fix hacked wordpress and why so many people recommend because it is so easy to learn it is. Unfortunately, that can also be a detriment to the health of our sites. We need to check my blog learn how to add a safety fence.
If you're this content among the proactive ones, I might find it somewhat harder to crack your password. But if you're among those ones that are reactive, I might get you.
There's a section of config-sample.php that's headed"Authentication Unique Keys." There are. A hyperlink is inside that section of code. You need to enter that link into your browser, copy the contents which you return, and then replace the keys you have with the unique, pseudo-random keys offered by the site. This makes it harder for attackers to automatically create a"logged-in" cookie for your website.
You may extend the plugin features with premium plugins such as: Amazon S3 plugin, Members only plugin, DropShop etc.. I think you can use it and this plugin is a good option.
There are always going to be risks being online (or even just being alive!) And it's easy to get caught up in the panic. As soon as we get caught up in the panic, we put the breaks on. This isn't a fantastic response. Just take some common sense precautions, then forge ahead. If something does happen, it will have to be addressed then and no amount of quaking in your will have helped. All is good, if nothing does and you have not made yourself ill.