Year and a half educated us that WordPress security shouldn't be dismissed by any means. Between 15% and 20% of the planet's high traffic sites are powered by WordPress. The fact that it is an Open Source platform and everyone has access to its Source Code makes it a tempting prey for hackers.
By default, the newest version of WordPress is pretty darn secure. The development team of WordPress has considered anything which may have been added to any repair hacked wordpress site plugins. In the past , WordPress did have holes but now most of them are filled up.
No software system is resistant to vulnerabilities and bugs. Security holes will be found and guys will do their best to exploit them. Keeping your software up-to-date is a good way once security holes are found, because their products will be fixed by reliable software vendors.
You should also set the"Anyone Can Register" in Settings/General to away, and you should have some sort of spam plugin. Akismet is the old standby, the one I use, but there are many of them nowadays.
Imagine if you go to WP-Content/plugins, can you see that folder? If so, upload this blank Index.html file into that folder as well so people can't view what plugins you might have. Someone can use that to get access because if your existing version of WordPress is up to date, if you're using a plugin or an old plugin using a Going Here security hole.
You don't always consider needing security when your website is new but you do have to protect yourself and your investment. Having a site go down and not having the ability to restore it quickly can mean a loss of customers link who can't find you and probably won't remember to search for your website again later. Do not let that happen to you. Back up your site as soon as you get it view website started, and schedule backups for as long as the site is operational. That way, you'll have peace and WordPress security of mind.