I have had two WordPress blogs hacked into in the past. That was at a time when I was doing very little internet marketing, and until I found time to address the situation (months later), these sites were penalised in the search engines. They were not removed, but the rankings were reduced.
The fix hacked wordpress Codex has an outline of what permissions are acceptable. File and directory permissions can be changed either via an FTP client or within the page from the hosting company.
Protect your login credentials - Don't keep your login credentials where a hacker might find them. Store them off, and even offline. Roboform is very good for protecting them, also. Food for thought!
Move your wp-config.php file one directory up from the WordPress root. WordPress will search for it there if it cannot be found in the root directory. Also, nobody will have the ability to read the file unless they've SSH or FTP access.
WordPress is one of the platforms for this page websites and self-hosted sites. While WordPress is pretty secure from the box, there are always going to be people who wish to make trouble by finding a way to split into sites or accounts to cause damage or inject hidden spammy links. That's why it's important to make sure that your WordPress installation is as secure as possible.
There are always going to be risks being online (or even just being alive!) And it's easy to get caught up in see this website the fear. When we get caught up in the fear, we put the breaks on. This isn't a response that is fantastic. Take some read the article common sense precautions forge ahead. If something bad does happen, it will need to be addressed then and of quaking in your boots 23, no amount will have helped. All is good, if nothing does and you haven't made yourself sick.