Someone has infiltrated my website and is adding suspicious images

A new user was created and posts inserted in my website by anonymous user. Need help figuring out how to stop this.