In principiu (pe langa ce-ai spus tu):

1.Wp-Security Scan - WordPress › WP Security Scan « WordPress Plugins
2.Schimba adresa de logare din "wp-login.php" in... altceva (ex. logare-inregistrare);
3.BulletProof Security - WordPress › BulletProof Security « WordPress Plugins
4.Sa nu ai user-ul de logare "admin";
5. ...backup.