1. Wordfence Security
2. All In One WP Security (yes, I always install both because they do not conflict and improve protection so much)
3. All in one SEO
4. Autoremove Attachments
5. Disable Fullscreen Mode (Because I hate default full screen mode in wordpress)