Site getting hacked

My site http://www.fcengland.com seems to have been hacked a couple of times with the homepage redirected to spam. My fault initially for allowing any users to register without screening; I’ve now changed this.

Since then, the site has been hacked again via what seems to be the header logo/image area as that’s where code is being pasted by whoever is doing it to replace the code for the normal header/logo.

Any advice to stop this happening? Wondering if anyone can see anything obvious in my code that is allowing this exploit?

thanks for your help.

Paul

https://forum.tagdiv.com/topic/tutorial-good-basic-security-practices/
https://forum.tagdiv.com/topic/security-risk/
https://forum.tagdiv.com/topic/newspaper-theme-old-version-hacked-yesterday/
https://forum.tagdiv.com/topic/newspaper-theme-keeps-getting-hacked/

I’m having a similar problem and I found this:
https://wordpress.org/support/topic/new-kind-of-hacking-users-with-admin-rights/

I can’t find any info on this forum about the hacking but it’s definitely a problem with the Newsmag and Newspaper themes.

Thanks Edward. Going through those links now.