WordPress Malware Removal - Unauthorized Access

My WordPress site has been compromised and attackers are slipping in through unauthorized access points. I need someone who can jump in right away, locate every infected file, root-level script, and hidden backdoor, then clean and harden the installation so the login page and admin area are secure again. What you’ll be working on • Platform: WordPress (latest stable core and a mix of common premium plugins) • Issue: Unauthorized access—privilege escalation and stealth admin users keep appearing • Hosting: Standard cPanel environment with full FTP and phpMyAdmin access ready for you Scope of work 1. Scan the entire public_html, database, and [login to view URL] for injected code, shells, and rogue users. 2. Remove or repair anything malicious, preserving my content and theme customizations. 3. Update WordPress core, plugins, and themes to close known vulnerabilities. 4. Strengthen file permissions and key settings (salts, .htaccess, directory browsing, XML-RPC, etc.) so the same exploit cannot be reused. 5. Provide a brief before-and-after report outlining what was found and what was fixed. I do NOT need a full security audit or lengthy penetration test after the cleanup—just an effective, verifiable removal and basic hardening that restores normal operation. Deliverables • Clean, functioning WordPress site with no lingering malware or unauthorized users • One concise remediation report (bullet points or short paragraphs are fine) • Recommendations for any remaining actions I should take on my own Please bring proven experience with Wordfence, Sucuri tools, or similar, and be ready to start immediately.

Project ID: 40541338