The biggest risk to your website security will be your logins. Do not use “Admin” as the user name for any account.
Plugins and Themes
Anything being out of date, from your plugins to your themes, and even the version of WordPress that you’re using can pose a security risk.
Can You Trust That Plugin/Theme?
Take Regular Backups
Taking regular backups from a site is a big step towards security.