Secure WordPress: best practices for updates, user permissions, web server and plugins to protect the CMS from attacks.