I have had several occasions when some one has hack my site

I have had several occasions when some one has hack my site and made themselves users. it was not entered from one of my customer forms or from the check out. I am new to wordpress so can some one point me to how I protect from this