How to protect wordpress from vulnerability?

Question

Information Security

Over the past week, I have had about 5-10 wordpress sites hacked on timeweb hosting.
Everywhere there are files: gopni3g.zip, 7e8beb5b57.php
All hacked sites stopped working.
Also, in 2-4 directories of sites without an engine, these files were also noticed.
Does anyone know how to protect themselves?
I read online about a vulnerability in the WP Mobile Detector plugin, which I don't have installed at all!
Reference file:
rgho.st/8NjHTdG9V

Answer 1

Follow basic hygiene rules

1. Install add-ons only from trusted sources
   
2. Update on time
   
3. Don't forget about backups
   

Answer 2

filezilla or whatever you have - take it down.

Answer 3

generally
0. don't use wordpress
this is set to automatic: ...sooner or later anyway...