Hardening WordPress against the ongoing brute-force attack

There’s an ongoing brute-force attack against WordPress and Joomla sites. The attack tries to brute-force the admin password. (Reddit)

I had to harden my WordPress some time ago. Here are the guides I followed when hardening my installation:

• My WordPress Site Was Hacked
• Hardening WordPress
• Ultimate Security Checker plugin (guide)

Additional steps I’ve taken today:

• Install the Limit Login Attempts plugin