WordPress chmod / security - standard recommendations. Run script at the root of the website (where wp-content, wp-config.php, etc is located).

wordpress-security.sh

#!/bin/bash

find . -type f -exec chmod 644 {} \;
find . -type d -exec chmod 755 {} \;
chmod 755 wp-content;
find wp-content/ -type f -exec chmod 644 {} \;
find wp-includes/ -type f -exec chmod 644 {} \;
mkdir wp-content/uploads; find wp-content/uploads -type f -exec chmod 755 {} \;
chmod 444 wp-config.php;