WordPress Malware Cleanup Expert

My service-portfolio site is throwing browser security warnings, so I know malicious code has slipped in. I need someone who can quickly pinpoint the entry point, wipe out every infected file, snippet, or database injection, and harden the entire WordPress stack so the warnings disappear for good.

Here is what has to be accomplished before we talk about any redesign:

• Trace and document the exact backdoor or vulnerability that let the malware in.
• Eradicate all malicious files, scripts, and database entries without disrupting legitimate content.
• Patch core, theme, and plugin weaknesses, then apply best-practice hardening (firewall rules, secure file permissions, updated keys, etc.).
• Validate that the site loads cleanly across modern browsers with no security alerts and that all service-and-portfolio pages render and function as expected.

I will supply server and wp-admin access, plus any logs you request, in a private chat once I shortlist candidates.

Proven WordPress malware-removal and security experience is essential; please share a brief note on similar cleanups you have completed. After the site is fully secured, I plan to start a separate project to revamp the design, so a smooth, documented cleanup now is critical for the next phase.