After changing the WordPress common paths, you need to hide them completely. If not, the old paths are still accessible and hackers are still able to inject SQL and Javascript into vulnerable installed plugins and themes.
Lesson 3 – Hide Your Site From Theme Detectors and Hackers Bots
Read More →