Part of the problem is that a lot of security advisories basically say "run the latest version".
Restricting access with .htaccess is a good idea; http://www.themepremium.com/wordpress-security-restrict-wp-c...
Restricting access with .htaccess is a good idea; http://www.themepremium.com/wordpress-security-restrict-wp-c...
1. Backing up theme, making list of plugins installed 2. Inspecting theme for any hacks. (difficult if you wrote your own) 3. Deleting _all_ files 4. Walking through the wp_options table for any leftover holes (very difficult) 5. Re-install WP 6. Re-install theme and plugins.
The WP team needs to work in something like you linked to into the core.
There are a few ideas I'm considering for securing and monitoring WP installations for intrusions.