Has my site been compromised?

Good day,

I haven’t been on my dashboard for a while.
Suddenly I have recieved various emails from wordpress@my company name, with strange requests to review my site, improve my social media etc, with reply emails that look unusual.
I assume that they may be hackers? And I am afraid that if I log onto my site – i dont yet have a security plugin/app on the site – that they will then have access to my password?
Is this a legitimate concern? Or is it from wordpress, and if so, why the strange reply emails. How am I to work on my site and put security on it?
I am a newbie on wordpress – so please not too much coding and jargon please.
Thank you in advance.