To have a minimum of security on wordpress the minimum is to keep the environment up to date (majority of updates are security updates), you can scan how secure it is with this library:
https://github.com/wpscanteam/wpscan
Or you can direcly go to a place like this and check it on-line:
There are so many spaces like this that offer short data in the free version and they try to sell you other versions.