How to Secure a WordPress Blog From a Trojan Infection

1. Upgrade Wordpress every time a new version is available. Click 'Tools' then 'Upgrade.' Click 'Update Automatically' to perform the upgrade. New versions of Wordpress fix security holes and issues, so you will be protected against known exploits and fixed bugs.
2. Ask your Web host to upgrade your server operating system and scripts when updates are available. This minimizes the risk of trojans getting in to your Wordpress installation through backend holes.

3. Create an administrator password that cannot be easily guessed. Using numbers, symbols and various letter cases can prevent your password from being cracked.
4. Use a FTP program or the file manager on your web server to check file and folder permissions. Unless otherwise required by your server or Wordpress, folders should be set with permission '755' and files should have permissions set at '644.'