Hi,
There are few steps to secure your wordpress:
1. Upgrade your plugins, themes, software.
2. Limit access of your Wordpress admin panel.
3. Use secure username and password and avoid to use "admin" username.
4. Secure wp-config.php file.
5. Limit login attempts.
You can also check
here for more steps.