WordPress Malware Cleanup & Hardening

The WordPress installation hosted on my GoDaddy cPanel has been compromised: core files and several custom themes are infected, and indicators point to SQL injection, cross-site scripting and phishing code that resulted in a fully hacked site. I have already isolated the account at the server level; everything else—diagnosis, removal, patching and preventive work—still needs to be done. cPanel access, WordPress admin credentials and GoDaddy account control will be provided as soon as the project starts. Feel free to use SSH, phpMyAdmin, WP-CLI, ImunifyAV or any other standard tooling you consider appropriate, provided no legitimate data is lost in the process. Deliverables • Complete malware removal from WordPress core files and affected themes • Closure of all discovered SQL injection, XSS and phishing vectors • Hardening actions inside cPanel and [login to view URL] (file permissions, salts, firewalls, .htaccess rules, cron cleanup, etc.) • Update of WordPress, themes and plugins to their secure, current versions • Post-clean scan report summarising actions taken and tests passed • Optional 30-day monitoring script or security plugin configuration to confirm the site stays clean Acceptance criteria The site must load without malicious redirects, pass a clean scan on VirusTotal, Sucuri SiteCheck and ImunifyAV, and score an “A” on Wordfence diagnostics once you are finished. The sooner the environment is stabilised, the better; please let me know your estimated turnaround time and any specific information you need from my side before you begin.

Project ID: 40408142