By default, the newest version of WordPress is pretty darn secure. Anything which may have been added to any fix hacked wordpress plugins has been considered by the development team of WordPress . Before, WordPress did have holes but most of them are filled up.
Don't depend on your Web host - Many men and women rely on their web host to"do all that technical stuff for me", not realizing that sometimesthey don't! Far better to have the responsibility lie with you, instead of from your control.
First in line is currently creating a smarter password to your account. Passwords must be made with characters and numbers. You create small altered letters and can combine YOURURL.com them. Smarter passwords can be your gateway to zero hackers. Make passwords that only you can consider.
You can extend the plugin features with premium plugins like: Amazon S3 plugin, Members only here plugin, DropShop etc.. I think this plugin is a good choice and you can use it.
Implementing all the above will probably take less than an hour to finish, while creating your WordPress website more resistant to intrusions. Websites were this past year, largely due to easily preventable helpful site security gaps. Have yourself prepared and you are likely to be on the safe side.