Attackers carry out brute force attacks against WordPress websites every single day. Many bots can test thousands of username and password combinations every minute, and they never get tired. One weak password or one missing security setting can give an attacker full control of your site. I have cleaned up many hacked WordPress websites over…