The document provides tips for securing a WordPress website, including: 1) Rename the admin account, change the database prefix, and only install plugins and themes from WordPress.org to prevent attacks. 2) Common threats include brute force password attacks, SQL injections, and malware in themes/plugins. Plugins like Semisecure Login Reimagined and WordPress HTTPS can help prevent some of these threats. 3) Regularly backing up your site and using automated remote backups can help with recovery in case of an attack. The WordPress File Monitor and Useful 404s plugins can also help detect intrusions.

1. Securing Your WordPress Website Vladimir Lasky http://wpexpert.com.au/ WordCamp GC 2011

5. The Three Pillars of Security PREVENTION DETECTION RECOVERY

10. Brute Force Password Attack Example

11. Classic SQL Injection Example