Wordpres

Definitely can vouch for Wordfence, but the biggest vulnerabilities can usually be found when assessing server configuration. If you use shared hosting I guess that's less of an concern but if you setup your own VPS iI'd try and harden that instead.