WordPress/PHP Malware Scan, Cleanup & Security Patching (Cloudways)
Budget / Salary$30–250
TypeFreelance project
LocationRemote
Posted1 hour ago
I need an experienced WordPress security specialist to scan, clean, and patch my website. The site is getcoolops.com, a WordPress marketing site for a SaaS product, hosted on Cloudways.
My goal is simple: I need the site fully clean and safe, with no hidden backdoors left behind.
Scope of work
Full malware scan. Scan all files and the database for malware, injected code, backdoors, web shells, spam links, hidden redirects, and suspicious admin users.
Cleanup. Remove all malicious code and files. Replace any modified WordPress core files with clean originals. Check the theme and plugins against their official versions.
PHP and software patching. Make sure the PHP version on Cloudways is current and supported, and confirm the site still works after any upgrade. Update WordPress core, the theme, and all plugins. Remove anything unused, abandoned, or nulled/pirated.
Hardening. Disable file editing in wp-admin, set correct file and folder permissions, protect wp-config.php, block PHP execution in the uploads folder, rotate the salts/keys, and review admin users.
Blacklist check. Check Google Safe Browsing and other major blacklists. Request removal if the site is listed.
Report. Tell me what was found, which files were affected, how the attacker likely got in (if this can be determined), what you fixed, and what I should do going forward.
Requirements
Proven experience cleaning hacked WordPress sites. Please share examples.
Comfortable working on Cloudways (SSH/SFTP, application settings, PHP version, backups).
Take a full backup before making any changes.
No downtime or broken layout. The site must look and work exactly as it does now.
Manual review, not just running a plugin scanner and calling it done.
Do not install paid or third-party security plugins without asking me first.
Deliverables
A clean, fully updated, working site
A written report of the findings and fixes
A list of the passwords and credentials I should change after the job is done
In your bid, please tell me
How you would approach the scan and cleanup
Which tools you use
Your estimated time to complete the work
Whether you offer a re-check or guarantee period, for example if malware returns within 30 days
Access will be shared privately after I award the project.
My goal is simple: I need the site fully clean and safe, with no hidden backdoors left behind.
Scope of work
Full malware scan. Scan all files and the database for malware, injected code, backdoors, web shells, spam links, hidden redirects, and suspicious admin users.
Cleanup. Remove all malicious code and files. Replace any modified WordPress core files with clean originals. Check the theme and plugins against their official versions.
PHP and software patching. Make sure the PHP version on Cloudways is current and supported, and confirm the site still works after any upgrade. Update WordPress core, the theme, and all plugins. Remove anything unused, abandoned, or nulled/pirated.
Hardening. Disable file editing in wp-admin, set correct file and folder permissions, protect wp-config.php, block PHP execution in the uploads folder, rotate the salts/keys, and review admin users.
Blacklist check. Check Google Safe Browsing and other major blacklists. Request removal if the site is listed.
Report. Tell me what was found, which files were affected, how the attacker likely got in (if this can be determined), what you fixed, and what I should do going forward.
Requirements
Proven experience cleaning hacked WordPress sites. Please share examples.
Comfortable working on Cloudways (SSH/SFTP, application settings, PHP version, backups).
Take a full backup before making any changes.
No downtime or broken layout. The site must look and work exactly as it does now.
Manual review, not just running a plugin scanner and calling it done.
Do not install paid or third-party security plugins without asking me first.
Deliverables
A clean, fully updated, working site
A written report of the findings and fixes
A list of the passwords and credentials I should change after the job is done
In your bid, please tell me
How you would approach the scan and cleanup
Which tools you use
Your estimated time to complete the work
Whether you offer a re-check or guarantee period, for example if malware returns within 30 days
Access will be shared privately after I award the project.
Apply on Freelancer →
Project sourced from Freelancer.com. Applications happen directly on the original platform — we never collect your data.