Help verifying if my directory permissions and ownerships are correct

I self-host WordPress on Ubuntu using Apache, and I realized that some changes were made a while back to install a plugin. Unfortunately, I no longer remember what my permissions and ownership settings should be, and I’m concerned I might be exposing myself to security risks.

Here’s what I have:

-rw-rw-r-- 1 www-data USER 1577 Sep 28 12:10 .htaccess
-rw-rw-r-- 1 USER USER 1346 Jan 27 2024 .htaccess.backup
-rw-r--r-- 1 www-data www-data 1506 Jul 31 12:52 .htaccess.bk
-rw-rw-r-- 1 www-data USER 405 Feb 6 2020 index.php
-rw-rw-r-- 1 www-data USER 19915 Jul 16 20:00 license.txt
-rw-rw-r-- 1 www-data USER 7409 Sep 10 19:59 readme.html
drwxrwxr-x 2 USER USER 4096 Jan 28 2024 server-status
-rw-rw-r-- 1 www-data USER 7387 Apr 2 2024 wp-activate.php
drwxrwxr-x 9 www-data USER 4096 May 27 10:55 wp-admin
-rw-rw-r-- 1 www-data USER 351 Feb 6 2020 wp-blog-header.php
-rw-rw-r-- 1 www-data USER 2323 Aug 8 2023 wp-comments-post.php
-rw-rw-r-- 1 www-data USER 3617 Nov 13 13:14 wp-config.php
-rw-rw-r-- 1 www-data USER 3033 Jul 16 20:00 wp-config-sample.php
drwxrwxr-x 9 www-data USER 4096 Nov 13 20:04 wp-content
-rw-rw-r-- 1 www-data USER 5638 Aug 8 2023 wp-cron.php
drwxrwxr-x 30 www-data USER 16384 Jul 16 20:00 wp-includes
-rw-rw-r-- 1 www-data USER 2502 Mar 29 2023 wp-links-opml.php
-rw-rw-r-- 1 www-data USER 3937 Jul 16 20:00 wp-load.php
-rw-rw-r-- 1 www-data USER 51238 Jul 16 20:00 wp-login.php
-rw-rw-r-- 1 www-data USER 8525 Nov 7 2023 wp-mail.php
-rw-rw-r-- 1 www-data USER 28774 Jul 16 20:00 wp-settings.php
-rw-rw-r-- 1 www-data USER 34385 Aug 8 2023 wp-signup.php
-rw-rw-r-- 1 www-data USER 4885 Aug 8 2023 wp-trackback.php
-rw-rw-r-- 1 www-data USER 3246 Apr 2 2024 xmlrpc.php

My wp-content folder:

drwxrwxr-x  9 www-data USER           4096 Nov 13 20:04 .
drwxrwxr-x  6 www-data USER           4096 Nov 13 18:59 ..
drwxr-xr-x  2 www-data www-data      4096 Aug 12 17:56 cache
-rw-rw-r--  1 www-data USER             28 Jan  8  2012 index.php
drwxrwxr-x  2 www-data www-data      4096 Sep  6  2021 mu-plugins
-rw-rw-r--  1 www-data www-data    106094 Oct 16 10:50 object-cache.php
drwxrwxr-x 12 www-data USER           4096 Nov 13 16:37 plugins
drwxrwxr-x  5 www-data USER           4096 Nov 13 16:35 themes
drwxrwxr-x  2 www-data USER           4096 Nov 13 16:37 upgrade
drwxrwxr-x  4 www-data www-data      4096 Nov 13 16:34 upgrade-temp-backup
drwxrwxr-x 10 www-data www-data      4096 Nov 13 18:47 uploads

USER already has been added to the www-data.

Thank you.