The fix wordpress malware protection Codex has an outline of what permissions are Visit Your URL acceptable. Directory and file permissions can be changed either through an FTP client or within the administrative page from the web host.
Don't depend on your internet host - Many people depend on their web host to"do all that technical stuff for me", not realizing that sometimesthey don't! Far better to have the responsibility lie instead of out of your control.
Move your wp-config.php file up one directory from the WordPress root. WordPress will search for it there if it cannot be found in the main directory. Also, nobody else will be able to read the file unless they've SSH or FTP access.
Can you view that folder, what if you go to WP-Content/plugins? If so, upload this blank Index.html file into that folder as well so people can not view what plugins you might have. Because if your current version of WordPress is up to date, if you're using an old plugin or a plugin using a security hole, then someone can use this to get access.
Implementing all of the above will take less than an hour to finish, while creating your WordPress website more immune to intrusions. Sites were cracked last year, mainly due to easily preventable security gaps. Have yourself prepared and you're likely to be on the safe side.