The WordPress wp-login, wp-login.php, and login paths are the first ones a hacker bot will access for Brute Force attacks. Changing and hiding these paths is mandatory when you have a WordPress CMS.
To do this with WP Ghost, change the name for the wp-login with your custom name in WP Ghost > Change Paths > Login Security > Custom Login Path.

Note! No files or directories are physically altered. All changes are implemented through server rewrite rules, ensuring no impact on SEO or loading speed.
Read More: Change and Hide wp-login Path with WP Ghost