WordPress, Drupal, and Joomla power three-fourths of the world’s CMS-based websites. A few simple steps will keep your CMS-powered website secure:
Keep your CMS software up-to-date. Immediately install all updates to core software and plug-ins. If you don’t visit your admin panel daily, schedule a reminder in your smartphone for updating your CMS regularly.
Perform regular backups. Backup your site and its database at least weekly, perhaps at the same time you check it for updates.