You may well have heard all the buzz online about the attacks on WordPress security. Unfortunately this is no joke, and it needs to be taken very seriously, or all you've built could be hijacked or worse, lost to you.
Cloning your site is another level in fix wordpress malware plugin which may be very useful. Cloning simply means that you have backed up your website to a totally different place, (offline, as in a folder, so as to not have SEO problems) where you can access it at a moment's notice if the need arises.
Everything you have worked for will go with it, description should the server of your site return. You'll make no sales, get signups or no traffic to your website, and in short, you're out of business until you have the site.
Maintain control of your assets - Nothing is worse than getting your livelihood in the hands of someone else. Why take chances with something as important as your website?
Whitelists phrases and black based on which field they look within. (unknown/numeric parameters vs. known post bodies, comment bodies, etc.).
Oh . And incidentally, I talked about plugins. Make sure it's a secure one, when you get a plugin. Don't install any plugin because the owner is saying that plugin will allow you to do that or this. Use perhaps, or a test site to look at the plugin get a software engineer to analyze it carefully. This way you'll know it isn't a threat for you or your business.