Getting Hacked

I have some niche sites generating decent small income. I use limit login attempts, although some of them are running wordpress 3.5. I dont update because I dont want to risk all my theme changes altering because I never made a child theme.

Just wondering if this is a sure-fire way to get hacked? And also if there are any other necassary plugins needed to avoid ever getting hacked?

I use wordfence plugin too. Try it to know more about it.

Bro...keep updating your wordpress. You know i got hacked before and when i contacted my Tech Guy, he said that i have had old versions of wordpress from last 1 year and that's the man reason how i was being hacked.

I have heard good reviews about bulletproof security.

One of the best ways to prevent wordpress hack is to update wordpress itself.