There are a number of things you can do to protect your Wordpress website against hackers. One is to delete any inactive themes and plugins.
I’ve been studying ways to “harden” Wordpress websites against hackers. I’ve learned it’s safer if the Wordpress Admin is not named “Admin”.