Many injection attacks involve themes and plugins that allow visitors to enter information on your site. I suggest using only proven themes and plugins. Then always update your plugins and theme. - Manage input fields and submit data. This is a technical issue and will require developer assistance. - Use a WordPress firewall.