WooCommerce Malware Cleanup and Hardening

A recent security scan revealed that my WooCommerce store has been compromised: visitors are occasionally redirected to an unrelated gaming website. I need the infection fully removed, the root cause identified, and security tightened so the problem does not recur.

I do have a site backup, but it is outdated, so restoring from it may not capture recent orders and product changes. A careful, non-destructive clean-up is therefore essential.

Key objectives
• Isolate and eliminate every malicious file, script, or database entry.
• Stop the current redirect to the gaming site and verify that no hidden back-doors remain.
• Patch WordPress, WooCommerce, themes, and plugins to the latest secure versions without breaking functionality.
• Implement best-practice hardening (firewall rules, file permissions, security plugin configuration, automated scans, etc.).
• Provide a concise post-remediation report listing what was found, what was fixed, and recommendations for ongoing protection.

Acceptance criteria
The storefront must load normally on both desktop and mobile, show no redirects or injected code when scanned with Sucuri, Wordfence, or a similar tool, and pass Google Safe Browsing without warnings.

Please work on a staging copy first or create your own temporary clone, then migrate the clean version back to the live server with zero loss of recent orders or customer data.