Permissions on Wordpress directories?

Question

Access rights

What permissions do you need on WordPress nested directories in order for attachment uploads and auto-updates to work? The server is repeatedly hacked and spam mailings are launched. I stuck a crutch to stop the mailing - but the root cause was incorrect rights like 777 on Uploads.

Answer 1

I think it's worth limiting the execution.
If I'm not mistaken, you specify the parameters for the folder: 777
Owner, Groups, Others.
For each group, set your rights: Read - Write - Execute (RWX). Restrict to X (Try to set permissions for the folder: 764)

Answer 2

use iThemes Security ( setting )
With it, you can disable the modification of wp files, view logs, ban by ip, disable scripts .. etc.