It depend on several factors , like:
- How big is your site. If your site receives only few hits daily mostly like nobody knows about it therefore wont be interesting to "get in" even if you leave open door
- what kind of plugins you have installed
- is it WordPress version up to date
- do you have installed script firewall of any kind (mod security, CSF, your own rules)
- do you have installed security patches for old PHP version
|