WordPress sites are vulnerable because so many people use the CMS to power their websites. Hackers look for old versions of WordPress, however, most security vulnerabilities come from plugins and themes. Update your WordPress core, themes and plugins whenever a new security update is released and use a strong password to help protect your site. Here are several reasons a person would attack a website from a small business:
Backlink Credit
Hackers can attack your site using malware and place hidden links on it. It's called a cloaked keyword hack. You may not see links hidden using CSS but search engines can see them and give the website being linked to credit for a backlink. If this happens to your WordPress site, run Wordfence, which compares the file sizes of WordPress versions, themes and plugins. It will alert you to any differences where a hacker used malware to inject malicious code.
Changing Affiliate Links
Website attackers can use various methods to guess your password, usually with brute force or dictionary attacks. Strong passwords of 12 characters can help thwart these attacks. Once in, hackers can perform any actions they choose to, such as changing affiliate links to their own, placing hidden links and accessing sensitive data.
Denial of Service
Sometimes hackers just want to deny other people from accessing your website. They may do so to attack your company because they have a grudge against you. Hackers may also do this to government websites to protest policies, but if you have a small business, hackers can cause you to lose revenue from daily traffic. A competitor may also want your visitors to look for another site, like theirs, instead. Using a zombie network of computers, hackers will overload your server with requests.
Unfortunately, it is simple for people to hack your website. Directions and free code are widely available online. For more information click here https://www.reddit.com/r/SEO/comments/fhk2af/helpmysitehasbeen_attacked/.