I run a dedicated server with cpanel and the web server that it integrates with is apache and I assume you're account is in a similar setup.
What you want to do immediately is use whatever patience you have to periodically check the server logs, and look for entries of systems trying to access URL's that return a 404 error code. Then search for the files that return a 404 on google, and you'll learn something new.
Now what I did learn is that potential hackers use computers to try to access wp-admin.php along with a host of other junk that's not found on my server. wp-admin.php seems to be a Wordpress component.
Having said all that, here's what I recommend. Check the Wordpress manual, install Wordpress if you like and backup all your data the moment you publish your website. Then remove all the Wordpress components you don't need (especially the login page to the administration interface) or even rename them since potential hackers search for only standard files.
If you do not remove unnecessary components, then the potential hacker will likely find the login interface and then begin flooding the fields with usernames and passwords in hopes that the correct one is discovered. They could use brute-force attacks and/or dictionary-attacks or even anything to get their way in.