How to protect Wordpress from being hacked?

Question

Burglary protection

Good day!
Problem following: There is a hosting on which two sites on Wordpress lie. A couple of times a year they are infected with viruses, which, as a rule, send out spam using the resources of my hosting account. Google in such cases hangs a stub on the site with a message about malware and traffic drops instantly. I deleted all files, uploaded new ones, restored the database from backup, sent a request to check the site to Yandex / Google. Everything was successfully resolved. But now it began to happen more often, sometimes even 3 days after treatment. Although I always have a fresh version of Wordpress and some kind of security plugin.
Need advice on how to solve this problem or at least minimize this to 1 time per year. The fact is that I like Wordpress for its abundance of plugins and themes. I'm used to it :)
I will be glad to any suggestions! :)
PS If there are free platforms that are not inferior in functionality to Wordpress, and are not subject to this kind of hacking, then I want to know about them.

Answer 1

1 where did you get the template for the site from?
if not from the official repository - 99%, that there is a backdoor in the template
if the programmer wrote - 50% that he left a hole
2 did you update the plugins / engine?
3 are you sure that you are cleaning out all the files completely?
solve it, and then you can already deal with security settings.

Answer 2

https://ru.wordpress.org/plugins/all-in-one-wp-sec... turn all settings to maximum protection.

Answer 3

https://habrahabr.ru/post/145241/
https://habrahabr.ru/company/centosadmin/blog/255343/
i.e. hard non-passing of requests not in the format, fail2ban to help

Answer 4

https://enjoyweb.net/wordpress-site-protection/ -
Basic methods for protecting a WordPress site