What is WordPress cloning and why is it a very useful tool? Most people think this is a shady technique for copying websites to garner more link traffic and love, and while that may have been accurate (and useful!) At one time, this is an entirely different endeavor.
The fix wordpress malware cleanup Codex has an outline of what permissions are okay. Directory and file permissions can be changed via an FTP client or within the administrative page from your web host.
Protect your login credentials - Don't keep your login credentials where a hacker might find them. Store them offsite, and even offline. Roboform is very good for protecting them. Food for thought!
Keeping your WordPress website up-to-date is one of the easiest things you can do. For the last few versions, WordPress has included the ability to set up automatic updates. Not only that, informative post but sites are notified whenever a new upgrade becomes available.
Take note of your password! I recommend the version of the software *Roboform* to remember your passwords.
Oh . And by the way, I talked about plugins. Make sure it's a secure one when you get a plugin. Don't install any plugin simply because the owner is saying on his site that plugin can allow you to do that or this. Use a test site to look at my explanation the plugin, or maybe get a software engineer to analyze it. This way you'll know it is not a threat for you or your organization.