>>767584
You might want to look into using Lets Encrypt to serve the site over TLS, and updating Wordpress from 5.8.3 to 6.3.x (unless there is a reason to stick with v5).
There are also some things you can do to turn off user enumeration, Apollo Sinclair.