Here is a quick demo using WPScan to brute force into a plain old WordPress install. The concept is to show how trivial it is using open source and readily available tools to brute force a WordPress site.
Configure Remote and Server Scanning
A quick tour of configuring your Sucuri monitoring with Tony Perez,
How to add a website to Sucuri Backups
Easily backup your sites off your server so your files and databases are readily available if the need arises. This tutorial shows you how easy it is to start backups, and recover your files, with Sucuri Backups