WordPress sites are hacked and attacked all the time. You may not be able to stop every hack attack, but you can minimize your risk by hiding what you are running on your server. WP Hide & Security Enhancer is one plugin for the job. It hides your files, themes, and plugins paths from being shown.
This plugin lets you change theme and CSS paths and remove unnecessary information from your files. Want to block access to certain paths? No problem. WP Hide & Security Enhancer can also be used to hide your login page, block XML-RPC, and make it harder for hackers to target your site in the process.
Many of these actions can be accomplished with custom NGINX and htaccess directives. This plugin simply saves you time hiding WordPress info. This is a free plugin.