We can not stress the fact more that you do need protection with WordPress, we recommend Wordfence ( https://www.wordfence.com )