WordPress Malware Cleanup & Hardening

My WordPress site shows clear signs of malware across both the admin area and the public-facing pages. I attempted a manual cleanup, but traces of the infection keep resurfacing.

I need an experienced security specialist to:
• Perform a deep scan to identify all malicious code, backdoors, and database injections.
• Safely remove every infection without disrupting existing content or functionality.
• Patch core, theme, and plugin vulnerabilities, replacing compromised files where needed.
• Harden the installation—strong login rules, file permissions, firewall or reputable security plugin configuration, and any other best-practice measures.
• Provide a concise post-cleanup report summarizing what was found, what was fixed, and actionable steps I can take to prevent future attacks.

You should be comfortable working with cPanel/FTP, phpMyAdmin, and common WordPress security tools such as Wordfence, Sucuri, or iThemes Security. Quick turnaround and clear communication are important, as the site is live.