I don't know about you, but when I was securing my WordPress site, and I was researching to see what others were doing to maintain their blog safe, I found so much information I was confused. And some of the information was in fact on superstitious or the top. People told me rename this folder to rename this file and set up these ten plugins. It seemed to be a lot of energy and work.
Install the fix malware problem Firewall Plugin. Stop and this plugin investigates net requests to identify attacks that are obvious.
Don't make the mistake of thinking that your web host will have your back so far as WordPress backups go. Not always. It has been my experience that the hosting company may or may not be doing proper backups while they say that they do. Why take that kind of chance?
Exclude pages - description This plugin provides a checkbox,"include this page in menus", which is checked by default. If you uncheck it, the page won't appear in any listings of webpages (which includes, and is usually restricted to, your webpage navigation menus).
Upgrade if you aren't running the latest version of WordPress. Leaving your site on an old version is like maintaining your door unlocked when you leave for vacation.
Of course you can install plugins to make your shop like automatic plugin or share buttons. That's all. Your store is up and running!