
Completed
Posted
Paid on delivery
My WordPress site has been hit by malware and I can no longer log in to wp-admin. I need the infection completely cleaned, the original functionality restored, and the root cause addressed so it doesn’t happen again. You’ll have SSH, cPanel or FTP access (whichever you prefer) as soon as we start. I expect you to run a deep scan across core files, themes, and the database, eliminate every malicious script or backdoor, then harden the installation—updating WordPress, themes, and plugins where safe to do so, tightening permissions, and adding a firewall rule set. Deliverables • Clean, fully functioning WordPress site with wp-admin access restored • Brief security report summarising what was found, what you removed, and any preventive steps you implemented or recommend If you can get everything back online quickly and prove the site is clean, that will wrap the job.
Project ID: 40603470
47 proposals
Remote project
Active 7 days ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs

WordPress malware removal will cover the complete recovery of your site, including restoring wp-admin access, removing malicious scripts and backdoors, and addressing the root cause rather than only treating visible symptoms. I’ll begin with a safe backup and review of recent file changes, access logs, PHP files, uploads, WordPress core, themes, plugins, and the MySQL database. Using SSH/WP-CLI where available, I’ll compare core files against clean WordPress versions, inspect injected options and scheduled tasks, identify unauthorized admin users, and quarantine or remove compromised code. I’ll then repair affected files, reset credentials and salts, update WordPress, themes, and plugins where compatibility allows, and test the front end and admin functionality. Hardening will include secure file permissions, disabling unnecessary write access, removing unused components, and applying an appropriate firewall rule set. I’ll also check for reinfection indicators before final verification. You’ll receive a brief security report explaining what was found, removed, restored, and what preventive steps were applied or recommended. I can start immediately and typically complete this in 1–2 days, depending on the infection scope. Which access method can you provide first: SSH, cPanel, or FTP? Muhammad Saad
$30 AUD in 2 days
7.8
7.8
47 freelancers are bidding on average $43 AUD for this job

Hello, I can clean your WordPress site thoroughly, restore wp-admin access, and harden security to prevent future infections. I’ll run deep scans across core files, themes, and the database, remove malicious scripts, update WordPress safely, and configure firewall rules with tightened permissions. Would you like me to also set up automated backups so you’re protected against similar issues going forward? I’ve done similar work with great success and confident to fulfill your requirements. Let’s talk.
$60 AUD in 2 days
9.6
9.6

Hello, As a leader in the global marketplace, our team at Our Software brings extensive experience and a stellar track record to the table. With a special focus on web design, development and Content Management Systems (CMS), we've developed an intimate understanding of WordPress structures and its vulnerabilities. Drawing on our skills in PHP coding, we have successfully removed malware from dozens of compromised WordPress sites and restored their functionality. When engaging with projects like yours, we ensure a thorough scan of every nook and cranny - core files, themes, and databases - to confirm each malicious script and backdoor is rooted out. We go beyond just removing the malware; hardening your installation is critical to ensure this episode doesn't repeat itself. By updating WordPress versions, themes and plugins cautiously, tightening permissions and adding firewall rulesets, we lay down several lines of defense reinforcing your website security. Finally, we understand better than most the gravity of keeping you informed throughout this process. We prioritize quick solutions without compromising quality. A clean fully-functioning website with wp-admin access restored is what you'll receive. Moreover, we deliver a comprehensive security report that outlines what was found, what was removed, as well as preventive steps undertaken or strongly recommended for future maintenance. Choose us for a swift and thorough resolution to your malware woes! Thanks!
$30 AUD in 1 day
8.6
8.6

Hi, I'm a senior developer with 20+ years of experience specializing in WordPress security, having handled 1,500+ similar cleanups and recoveries. I'll log in via cPanel or FTP, run a full scan of core files, themes, plugins, and the database to identify malicious scripts, backdoors, or compromised accounts, then remove every infection. After cleaning, I'll restore wp-admin access, update WordPress, themes, and plugins where safe, tighten file permissions to 644/755, and add server-level firewall rules to block common attack vectors. I'll verify the site is clean by checking for reinfections, broken functionality, and admin access, then provide a concise security report listing what was removed and hardening steps taken. I can start immediately.
$30 AUD in 1 day
8.0
8.0

Getting you back into wp-admin and fully cleaning the infection is exactly the kind of recovery work I handle regularly. Once you give me SSH or cPanel access, I'll take a snapshot, then run a deep scan across core, themes, plugins and the database — comparing core files against fresh WordPress checksums, hunting for injected scripts, eval/base64 payloads, rogue admin users, and backdoors hidden in uploads or wp-config. I'll remove every malicious file, clean infected database entries, restore your admin access, and then harden everything: update WordPress/themes/plugins where safe, tighten file permissions, rotate salts and passwords, and add firewall rules to block re-entry. I'll also pin down the root cause so it doesn't recur. You'll get the clean, working site plus a short security report of what I found, removed, and hardened. I can start immediately.
$10 AUD in 1 day
7.5
7.5

Hello A hacked WordPress site is incredibly stressful, especially when it disrupts your business and scares off visitors. I can clean the malware, restore your access, and patch the vulnerabilities today. Over the last four years, I've successfully recovered over 100 infected WordPress sites and secured them against future injections. Can you share your site URL so I can run a quick, free diagnostic scan right now? Giáp Văn Hưng
$30 AUD in 7 days
6.9
6.9

Hello there, I'd love to help recover and secure your WordPress website. I'll perform a complete malware cleanup by scanning your core files, themes, plugins, and database to remove all malicious code, backdoors, and injected scripts. Once the site is clean, I'll restore wp-admin access, verify that all functionality is working correctly, safely update WordPress and installed components, strengthen file permissions, and implement security hardening to reduce the risk of future attacks. After the cleanup, I'll provide a concise security report outlining the infection source, the files or database entries that were cleaned, the preventive measures implemented, and any additional recommendations to keep your website protected. Before completion, I'll thoroughly test the website to ensure everything is functioning normally and securely. Regards, Pankaj
$60 AUD in 1 day
6.9
6.9

Hi! My name is Marjan and I'm here to offer you my services as a skilled applicant with over a decade of experience working on Freelancer.com. l believe I am the best fit candidate for this project due to my extensive experience; I would like to have a discussion to get to know that we both are on the same page. Once the scope will be locked, I will start working on it right away.
$200 AUD in 7 days
6.8
6.8

Hi, I can clean your WordPress site thoroughly, restore wp-admin access, and track down the root cause so it doesn’t come back. I’ll scan core files, themes, plugins, and the database, remove all malware/backdoors, then harden permissions, update safely, and add firewall protections. I’ll also give you a brief security report with what was found, what I removed, and the steps taken to secure the site. I can get this back online quickly and cleanly. Regards, Parvesh M.
$30 AUD in 3 days
6.4
6.4

Hi, I can clean the malware, restore access, and harden the site so it doesn't get reinfected. I've removed similar WordPress malware where the infection hid in theme files and a compromised plugin, causing intermittent admin lockouts. I’d approach this using a staged cleanup—scanning files and database separately, removing only malicious code without breaking dependencies, and leaving a clean backup before each step. The biggest improvement will come from tightening file permissions and disabling known vulnerable plugins. I’ll test the site thoroughly after each change and document everything in the report you asked for. This should get your site back online securely without losing any original functionality. If we’re aligned, I can start right now. Thanks, Denis
$30 AUD in 1 day
6.1
6.1

I’ve cleaned compromised WordPress instances hundreds of times, this is right in my wheelhouse. I’ll disable all non-core plugins and run `wp-cli` core verify-checksums against clean versions to baseline corruption. Then I’ll scan `/wp-content/`, `/wp-includes/`, and the database with `wpscan`, `grep` for eval(base64_decode), and `mysqldump` to diff against known-good dumps for injected rows or serialized payloads. I’ll strip all non-default themes, rebuild from repo tags, verify file hashes, then re-enable plugins one at a time while watching access logs for reinfection vectors. After restoring wp-admin, I’ll tighten permissions to 644/755, add `.htaccess` firewall rules, and update everything via `wp-cli` auto-updates where safe. After 24h clean uptime without alerts, I’ll bundle findings into a concise report. Thanks, Andrii.
$20 AUD in 1 day
5.0
5.0

Hi there, I'm an experienced WordPress developer and can quickly identify and fix the issue you're facing, whether it's a plugin conflict, theme error, malware issue, or any other technical bug. I’ll ensure your site is running smoothly again. Please share the details or access, and I’ll get started right away. Looking forward to helping you out! Thank you!
$30 AUD in 1 day
5.2
5.2

I can restore your WordPress site and clear the security breach immediately. I have extensive experience in WordPress Malware Removal and Recovery, specifically handling cases where wp admin access is blocked and files are compromised. I will manually audit your core files, remove malicious scripts from your database, and clean your themes and plugins. Once the infection is gone, I will harden your login security and update your salts to prevent a reoccurrence. I am proficient with cPanel, PHP, and MySQL, which allows me to work directly on the server level to fix these issues. I have successfully recovered dozens of hacked websites with similar symptoms. Please provide your server level access so I can begin the cleanup process now. when would you like me to start?
$30 AUD in 1 day
4.4
4.4

Hi,I understand malware infection with wp-admin access locked out. I'm ready to start with SSH/cPanel/FTP access as soon as you're set. My approach: Deep scan: Full malware scan across core files, themes, plugins, and the database to identify every infected/malicious file Complete cleanup: Remove all malicious scripts and backdoors, restoring original core/theme/plugin files Access restoration: Regain wp-admin access and confirm full site functionality is back Root cause & hardening: Identify how the site was compromised, update WordPress/themes/plugins where safe, tighten file permissions, and add firewall rules to prevent reinfection Deliverables: Clean, fully functioning site with wp-admin access restored A brief security report covering what was found, what was removed, and preventive steps taken/recommended I have hands-on experience with WordPress malware removal and hardening, and I understand the priority is getting the site back online quickly with proof it's genuinely clean, not just patched over.
$20 AUD in 6 days
4.8
4.8

# Anna's Universal Proposal Building Rules (v2.0) ## Goal Every proposal should feel like it was written specifically for the client. It must be short, easy to scan, technically confident, and demonstrate relevant experience instead of making generic promises. Target length: **100-140 words** --- # Universal Structure ## 1. Opening Always start with: **Hi, I'm Anna.** ✨✨ **I'm prepared and ready to help you with your project.** ✨✨ Then write **one sentence** proving you understand exactly what the client needs. Examples: "I understand you want to build a scalable WooCommerce store with Printful integration and future-ready dropshipping support." "I understand you're looking for an experienced React developer to build a dashboard with secure API integrations." "I understand you need an AI-powered marketplace with predictive pricing and fraud detection." Never repeat the project description. Never copy sentences from the job post. --- # 2. ✅ How I'll Manage Your Project write title with ✅. This section changes depending on the project. It should contain 2-4 concise sentences. Always explain • how you'll build it • how you'll solve technical problems • how you'll deliver safely Never simply list technologies. Instead explain how you'll use them. --- ## Category I ### Bug Fixing Explain likely root cause debugging strategy testing verification regression prevention Example "I'll first reproduce the issue, isolate the root cause, implement a safe
$30 AUD in 1 day
4.2
4.2

Hi, I can clean your WordPress site and restore full access without losing data. I once fixed a similar site where the malware hid in a plugin, overwrote core files, and left a backdoor—took 24 hours to fully remove and harden the installation. I’d approach this by scanning core files, themes, and the database with tools like WP-CLI and Maldet, removing all malicious code, and then updating everything to current versions while tightening file permissions to 644/755. The biggest improvement will come from disabling unused themes, removing old plugins, and setting up basic firewall rules in .htaccess. I’ll keep every change logged and test the site thoroughly before handing it back so nothing breaks unexpectedly. You’ll get a clean site with restored admin access and a short security report explaining what was fixed and what still needs attention. This will be done without downtime so your visitors won’t notice a thing. If it all looks good once you’re back in, we’re done. Thanks, Lazar.
$10 AUD in 1 day
3.8
3.8

I've handled similar WordPress malware cleanup projects before and can quickly restore your website. I'll remove all malware and backdoors, restore wp-admin access, secure the site, and provide a brief security report.
$40 AUD in 1 day
3.5
3.5

hello, your wordpress site has been compromised and needs complete malware removal with wp admin recovery while ensuring no backdoors remain and future attacks are prevented. i can perform a full security audit clean infected files and database restore functionality harden the installation and provide a clear security report. do you have a recent clean backup available for comparison during the recovery process
$100 AUD in 1 day
3.6
3.6

I can clean your hacked WordPress site, remove all malware/backdoors, restore wp-admin access, harden security. Ready to start immediately.
$50 AUD in 2 days
3.3
3.3

Hello, I understand that you require WordPress Malware Removal & Recovery. I specialize in building responsive, high-speed WordPress websites using modern page builders. I will configure all themes, plugins, and optimize your site for speed and SEO compatibility. With 5+ years of experience and a 5 star rating, I am confident that I can provide you with the best solution regarding your WordPress website development. I assure you with professional communication until your work is done. Let's connect in chat so I can understand your requirements and get started right away. Regards, Faytech Sol
$30 AUD in 1 day
2.7
2.7

Hello, I can restore your WordPress website quickly and securely. I'll perform a complete malware cleanup by scanning core files, themes, plugins, and the database, removing every malicious script, backdoor, and hidden infection. Once the site is clean, I'll restore wp-admin access, verify all functionality, update WordPress and compatible plugins, harden file permissions, configure firewall and security protections, and identify the root cause to prevent future attacks. You'll also receive a concise security report outlining the infection, cleanup process, and recommendations. I'm available to start immediately and get your website back online with minimal downtime. Let's secure your site today.
$15 AUD in 1 day
2.5
2.5

Sydney, Australia
Payment method verified
Member since Jan 27, 2026
$8-15 AUD / hour
$10-30 AUD
$30-250 AUD
$15-25 AUD / hour
$8-15 AUD / hour
$30-250 AUD
€30-250 EUR
₹1500-12500 INR
₹1500-12500 INR
₹600-1500 INR
$250-750 USD
₹12500-37500 INR
₹1500-12500 INR
$250-750 AUD
£18-36 GBP / hour
₹750-1250 INR / hour
₹1500-12500 INR
£2-5 GBP / hour
₹1500-12500 INR
$30-250 USD
$10-30 USD
₹600-1500 INR
€30-250 EUR
₹12500-37500 INR
$50-60 USD / hour