You need to secure your passwords, change mysql password as well. Also most importantly do update your wordpress site as soon as they have launched the new version.
Making strong password and restricting access to the the important directories is a good way to protect your wordpress site.