Efficient WordPress Malware Removal Tasks

SITUATION SUMMARY
Our WordPress website has been compromised by malware. We need an expert to immediately identify, remove, and secure the site.

Severity: CRITICAL

Status: Site is operational but heavily infected
 Infrastructure: SiteGround hosting, WordPress with 60+ ActiveCampaign forms

THE PROBLEM
Evidence of Infection:
Database contains malicious code (atob) in 77 tables across 140,760 database rows
Malware pattern matches Magecart/credit card skimming signatures
Code attempts to fetch payloads from command-and-control servers (difffelis.com)
Infection has been active for 3+ weeks
Generated 399,227 malicious requests in 24 hours
MySQL database bloated to 900MB+ (already resized after deleting bloated 404 logs)
Attack Vector:
Base64-obfuscated JavaScript code injected into WordPress
Likely via compromised plugin or theme
Code uses obfuscation pattern: atob(), JSON.parse(), dynamic script loading
Infinite retry loop with timestamp cache-busting
Impact:
CPU usage above limits for 3 weeks
Site performance degradation
Potential credit card/customer data exposure
Ongoing malware payload delivery to all site visitors

SCOPE OF WORK
Phase 1: Diagnosis & Isolation
Confirm infection scope using malware scanning tools
Identify compromised plugin(s) or theme(s)
Check for backdoor admin accounts or persistent malware hooks
Review file system and database modification dates
Search for additional malicious patterns (eval(), base64_decode, etc.)
Phase 2: Remediation
Manually remove malicious code from database if necessary
Delete infected plugin(s)/theme file(s)
Remove any backdoor files or unauthorized admin accounts
Clean WordPress core files

Phase 3: Verification & Monitoring
Run comprehensive malware scans to verify infection removal
Test site functionality and performance
Verify no lingering backdoors or malicious code
Set up continuous malware monitoring
Document findings and remediation steps

REQUIRED EXPERTISE
Must Have:
5+ years WordPress experience
Proven malware removal/forensics experience
phpMyAdmin and database administration skills
WordPress security best practices knowledge
Experience with Wordfence, Sucuri, or similar security tools
Ability to work under pressure with tight deadlines

Nice to Have:
Experience with Magecart/credit card skimming attacks
Knowledge of SiteGround hosting environment
Experience with ActiveCampaign WordPress integration
Incident response/forensics background

DELIVERABLES
Written malware analysis report (what was infected, how, when)
Cleaned WordPress installation
Restored clean database
Security hardening implementation
List of recommendations to prevent re-infection
30-day security monitoring support

HOSTING DETAILS
Host: SiteGround
CMS: WordPress
Database: MySQL
Backups: Available from before infection date
Access: cPanel admin credentials available
phpMyAdmin: Available for database analysis

CURRENT STATUS
Database backup from clean date: [not available - need professional to advise which]
Site currently: Operational but compromised
WordPress plugins: 60+ (including heavily-integrated ActiveCampaign)
Site traffic: Moderate (business website)

CONTACT & NEXT STEPS
To Apply:
Provide WordPress security credentials/portfolio
Available to start immediately
Expected timeline and cost estimate
Propose a remediation approach

**Title:** Urgent WordPress Malware & Hosting Account Security Investigation (Dedicated Server)

**Project Overview**

I am looking for an experienced WordPress security specialist to investigate and fully remediate an active compromise affecting one of my WordPress websites hosted on a dedicated HostGator server with WHM/cPanel.

The website has been experiencing unauthorized spam blog posts. Despite changing passwords and restoring from backup, the spam content has reappeared, suggesting there may be an active backdoor, malicious code, compromised account, scheduled task, or server-level issue.

**Environment**

* Dedicated HostGator server
* WHM/cPanel
* WordPress website
* Wordfence Premium installed
* SSH access available

**What Has Already Been Done**

* WordPress passwords changed
* cPanel passwords changed
* Site restored from backup
* Wordfence Premium installed
* Spam posts continue to appear after restoration

**Scope of Work**

* Full malware investigation
* Identify how unauthorized posts are being created
* Scan WordPress core, plugins, themes, uploads, and database
* Identify and remove backdoors, web shells, malicious cron jobs, hidden admin access, or unauthorized API access
* Review server logs, cPanel logs, and WordPress logs
* Investigate whether the compromise is limited to WordPress or exists at the hosting account/server level
* Secure the website and prevent reinfection
* Verify all WordPress users, database users, FTP accounts, SSH access, API tokens, and scheduled tasks
* Provide a summary of findings and actions taken

**Required Experience**

* WordPress malware removal
* Wordfence
* WHM/cPanel administration
* Linux server security
* Malware forensics and incident response
* Dedicated server environments

**Deliverables**

1. Identify root cause of compromise.
2. Remove all malware and unauthorized access.
3. Secure the website and hosting account.
4. Verify site functionality after cleanup.
5. Provide a written report explaining what was found and how it was fixed.

**Important**
Please describe:

* Similar malware cleanup projects you have completed.
* Your approach to identifying persistent WordPress infections.
* Whether you have experience with WHM/cPanel and dedicated servers.

This project is urgent. I am looking for someone who can start immediately and complete the investigation as soon as possible.

We need an experienced web developer or server expert to diagnose and fix resource overuse issues on our shared Namecheap hosting account (cPanel). The account has exceeded memory and I/O limits due to unoptimized scripts, misconfigured cron jobs, or high traffic. The goal is to optimize website performance, reduce resource consumption, and prevent future overages.

Note: We have already received a temporary account suspension notice and 12-hour window from our hosting provider. We need this resolved ASAP ideally within the next few hours.

Requirements:
- Experience with Namecheap Hosting, CloudLinux, and cPanel
- Knowledge of resource optimization, caching, and server configuration
- Ability to identify and fix unoptimized scripts, cron jobs, and other common causes of high resource usage
- Quick turnaround within a few hours

My WordPress website appears to have been hacked and is currently experiencing issues. I need an experienced website security expert to thoroughly investigate the website, identify the source of the compromise, remove any malware or malicious code, and fix any vulnerabilities.
The freelancer should:
Scan the website files, database, themes, and plugins.
Identify and remove malware, backdoors, and suspicious code.
Determine how the website was hacked.
Fix security vulnerabilities and secure the website against future attacks.
Verify that the website is functioning properly after cleanup.
Provide a summary of findings and recommendations.
Please include your experience with WordPress malware removal and website security in your proposal. I am looking for someone who can start as soon as possible and ensure the website is fully cleaned and secured.

Manual Forensic Audit: Identify the specific "root cause" of the infection, including the injection source, malicious database entries, and any unauthorized server-side tasks (Cron jobs) that are facilitating re-infection.

Surgical Cleanup: Remove all malicious code, injected scripts, and compromised database entries manually.

Harden & Secure: Update configurations to close the specific vulnerability used for entry and provide a comprehensive security hardening of the file system and database.

Verification: Conduct a high-sensitivity scan to ensure the site is clean of all malware.

Non-Negotiable Requirements:
You must perform a manual cleanup that preserves the current state of the database and files.

WordPress malware removal. We have 47 sites on our bluehost and have recently ran into issues with 429 errors. We are hoping to have someone go in and fix the malware

We are seeking an experienced freelancer to remove malware from our WordPress site. The ideal candidate will have a strong background in WordPress and malware removal, ensuring the site is secure and functions smoothly. Responsibilities include identifying and removing malware, updating plugins, and ensuring the site is free from vulnerabilities. If you have a proven track record in this area, we would love to hear from you.

Hello, I am starting up a research only peptide company with a dropshipping source. I need a website designed fairly quickly that looks sleek. I want it to have an age verification and a box that you have to accept that says by clicking this you agree to our terms and conditions.

A place where there’s is FAQ, about us, shop. I have attached a file as an example of a website we’d want it to look like.

Let me know if this is something you’d be up for and how long you think it would take

Small Changes word press website: additional page, post on landing page, update information.

Our WordPress site has been compromised. A malicious third-party script was injected into a footer widget (an SEO-poisoning / spam-link injection), which means an attacker has gained write access. We need a thorough cleanup and hardening — not just removal of the visible script.
Scope:

Remove the injected script and any other malicious code
Full malware scan and backdoor removal (Wordfence, Sucuri, or equivalent)
Identify and close the entry point (vulnerable/nulled plugins, themes, outdated core)
Audit for rogue admin users and unauthorized changes
Guide us through rotating all credentials (admin, hosting, FTP/SFTP, database)
Harden the site against reinfection
If the domain was flagged by Google Safe Browsing, prepare it for a review request

This is a professional law firm site, so discretion and reliability matter. We'll provide access once we've agreed on scope. Please share relevant WordPress security experience and your typical cleanup process.
Skills: WordPress, Web Security, Malware Removal, PHP, Wordfence, Sucuri
Experience level: Intermediate–Expert
Project type: One-time project, urgent
Duration: Less than 1 week
Hourly: $25–45/hr (estimate time)

A pentester who has experience in discovering new bypasses in wafs, discovering them undetected, and, optionally, has experience with cloudflare proxies

my company is Mason & Fifth (www.mason-fifth.com). We are creating a network of ' flexible living' buildings - to begin with across London - but eventually to exist in major cities, countryside, seaside... all over the world.

The offer sits between a residential block of studio apartments and a hotel - supported by a suite of lifestyle amenities and service provisions from restaurants, gym, spa facilities, recording studios, vinyl listening lounge, panoramic 10th floor lounge. You will be able to find information about what we offer across the internet.

We have built a white label app using a platform called The Dots - we were considering moving to another new one called Tiquo.

I am looking at building our own - an app that has some key features but most are windows into other 3rd party apps through APIs. Key partners include:

Mews - PMS
Toast & Sevenrooms - F&B
Acuity - Wellness/spa bookings
Other functionality to include event bookings, group chat, the ability for a customer to look at a dashboard to see details of their reservation / any other bookings

It needs to be supported by a backend dashboard that allow easy updates from a host of different users. The wording, imagery and layout need to be easy to adapt.

The interface needs to feel as holistic as possible despite the fact that the majority of there functionality is powered by independent 3rd parties.

Security, compliance, GDPR is all critical.

I have built the app - to me, it feels in a good place but I need the integrations to be setup and for all security to be checked. Is this something you can help with?

Need help with WordPress site that keeps breaking and currently it is forwarding to a very bad site I need the files removed that are bad, see the attached files for reference. I need the site fixed and remove infectious files and working properly at visittheafterlife.com it is currently forwarding to a very bad website.

WordPress Malware Removal & Site Isolation — Migrate 4 Sites Off Infected Shared Root (Bluehost)
I have 4 WordPress websites hosted on Bluehost, all currently sitting under a primary root directory that is infected with malware. The root is linked to an external malicious site and is re-infecting my other WordPress installs. I need an experienced WordPress security specialist to isolate each of my 4 sites, clean the infection, and ensure none of them are vulnerable to re-infection.

Scope of work

1
Audit & malware removal

Full scan of the root directory and all 4 WordPress installs. Identify and remove all malicious files, injected code, backdoors, and external connections. Check and clean the database for injections.

2
Site isolation

Move each of the 4 WordPress sites into their own isolated hosting environment (separate cPanel accounts or containers) so no shared root can re-infect them. Maintain all existing domains, DNS, and email.

3
Hardening & security setup

Harden each site post-migration: update WordPress core, themes, and plugins; set correct file permissions; disable XML-RPC if not needed; install a reputable security plugin (e.g. Wordfence or Sucuri); configure a WAF and enable activity logging.

4
Post-migration testing & handover

Confirm all 4 sites are fully functional after migration. Provide a written report detailing what was found, what was removed, and how each site is now isolated. Brief handover so I understand how to maintain security going forward.

Environment details

Host
Bluehost (shared)
CMS
WordPress × 4 sites
Issue
Malware in shared root directory
Access
cPanel + SFTP (can provide)
Urgency
High — active infection
What I'm looking for in a freelancer

Proven experience with WordPress malware removal and site migrations
Familiarity with Bluehost cPanel, account isolation, and SFTP
Experience with Wordfence, Sucuri, or similar security tools
Can start immediately — this is urgent
Clear communication and a written deliverable at the end

• Describe your recent experience with similar projects

Hello!

My social media accounts (multiple instagram accounts, discord and other accounts were hacked)

I was able to log in to some of them but not all of them and did preliminary changes like password change and enabling 2fa. I need your help. Do you think you can help me? I am willing to pay.

I am trying to move my directory from vitalitygrowthlabs.com to dialedin.health.

I started to rebuild the whole thing on DialedIn.health myself, but it's javascript and github, and evidently that doesn't rank well in semrush and ahrefs. So i need to use the structure of my old directory. The problem is, i have been updating some new pages on DialedIn.health so the old directory isn't completely up to date.

Can you help?
Melissa

We require Malware removal from our Wordpress websites hosted at Blue Host.
Please apply if you have experience.

We are seeking an experienced freelancer to address a possible WordPress malware infection causing unwanted redirects to sketchy websites. The ideal candidate will have a strong background in WordPress and malware removal, with the ability to diagnose and fix the issue promptly. This is an urgent task requiring immediate attention to ensure the security and integrity of our website.
The issue started appearing yesterday and appears ONLY during the first loading of the website. If i visit my homepage a second time, the redirect doesn't happen.
Please see the issue in the screen recording:

https://www.youtube.com/watch?v=GiANW6xgIAI

Hello,
Me and my friend account got hacked and we were able to find the device, routed mobile and VPN used, but we are not able to do anything, we got clues, and people who are don this, they attacked us and unable to prove that, can you help us to solve our problem

I am looking for an experienced WordPress security specialist to help clean a malware-infected WordPress website.

This is a client website that I took over from another freelancer. The hosting provider has temporarily suspended the website after detecting malware, and I need someone who can investigate the issue, remove the malware, secure the website, and help get it back online.

I can provide additional details, hosting access, and the email from the hosting provider after we connect.

Ideally, I would like this completed within the next few days.

Please only apply if you have experience with WordPress malware removal, hacked websites, and hosting suspensions.

Thank you,
Stefanie

We are looking for an experienced WordPress developer to fix multiple technical and security-related issues on our website.

**Scope of Work:**

* Perform full malware scan and remove all infections
* Identify and remove any backdoors or suspicious scripts
* Check and resolve plugin/theme conflicts
* Review and optimize website security configurations
* Ensure overall website stability and proper performance

**Requirements:**

* Proven experience with WordPress malware removal
* Strong understanding of server environments and cron jobs
* Ability to identify and fix root cause (not just temporary fixes)

We are seeking a highly skilled and experienced WordPress security expert to assist in locking down our admin login and protecting our site files from potential threats. As the digital landscape continues to evolve, the importance of robust security measures cannot be overstated. Our website is a vital component of our business operations, and we require a professional who can ensure that it remains secure against a wide array of vulnerabilities.

The primary responsibility of this role will be to conduct a thorough assessment of our current WordPress security protocols and implement effective strategies to mitigate risks associated with unauthorized access and potential breaches. This will involve analyzing our existing security measures, identifying any weak points, and developing a tailored security plan that addresses these vulnerabilities.

Key responsibilities will include:

1. **Securing Admin Access:** Implementing advanced techniques to lock down the WordPress admin login, including but not limited to, two-factor authentication, IP whitelisting, and limiting login attempts. The goal is to create a robust barrier against brute force attacks and unauthorized access.

2. **File Protection:** Ensuring that all sensitive files and data are adequately protected through measures such as proper file permissions, secure backup processes, and the implementation of security plugins that enhance file protection.

3. **Vulnerability Assessment:** Conducting a comprehensive security audit of the entire WordPress site, including themes, plugins, and core files. This will involve scanning for malware, outdated software, and any known security vulnerabilities that could be exploited by malicious actors.

4. **Implementing Security Measures:** Establishing a multi-layered security strategy that includes the installation of firewalls, security plugins, and SSL certificates to enhance the overall security framework of the website.

5. **Monitoring and Maintenance:** Setting up ongoing monitoring solutions to keep track of potential security threats and ensure that the security measures remain effective over time. This may involve regular updates, maintenance checks, and security report generation.

6. **User Education:** Providing guidance and training for our team on best practices regarding WordPress security, ensuring that everyone involved with the website understands how to maintain a secure environment.

The ideal candidate for this position will possess extensive experience in WordPress security, with a proven track record of successfully securing websites against various forms of cyber threats. We are looking for someone who is detail-oriented, proactive, and capable of working independently to implement security measures that align with industry standards.

If you are passionate about website security and have the expertise to protect our online presence, we would love to hear from you. Please apply with your resume, a cover letter detailing your relevant experience, and examples of previous work that showcase your ability to secure WordPress sites effectively. Your expertise will play a crucial role in fortifying our website and ensuring the safety of our digital assets.

We are seeking a skilled freelancer to enhance the security of our WordPress website. The ideal candidate will conduct a vulnerability assessment, set up a firewall, and ensure the site is protected from malware. Experience with WordPress security plugins and best practices is essential. The goal is to ensure our website remains secure and protected from potential threats.

This is the contract for the rebuild of preschoolofscottsdale.com to the new Elementor template. I will work on building out the staging site and will set you up with admin status upon acceptance.

Our server at bluehost has been infected with malware so we are looking for someone to help us clean it up. A few of our sites have a skyshell manager appearing when you try to go to the site.

Hello,

I currently have a WooCommerce store hosted on Hostinger and I am planning to migrate it to Cloudways while performing a complete performance optimization.

Before sending your proposal, please answer the following:

1. Do you have experience with:

* WooCommerce
* Cloudways
* Redis
* Object Cache Pro
* Cloudflare
* Core Web Vitals

2. Which tools will you use to diagnose performance issues before starting?
(For example: Query Monitor, New Relic, GTmetrix, PageSpeed Insights, etc.)

3. Will you review and optimize the database, including:

* Large tables
* Old data
* Action Scheduler
* wp_options
* Unused plugin data

4. I have old uploads folders from 2017–2023 totaling about 3.8GB that do not appear to belong to my current website.
Will you perform a media audit to identify unused files and legacy assets?

5. I also have old UpdraftPlus backups totaling about 3.7GB.
Will you review them and advise what can be safely removed?

6. I would like to replace Yoast SEO with Rank Math.
Will you perform a complete SEO migration including:

* Meta Titles
* Meta Descriptions
* Open Graph Data
* Schema Markup
* Redirects (if any)
* Sitemap Settings

while ensuring that indexing and search rankings are not negatively affected?

7. Will you configure and optimize:

* Redis
* Object Cache Pro
* PHP-FPM
* OPcache
* Cloudflare
* SSL
* Backups

8. Which performance plugin do you recommend for Cloudways and why?

* Breeze
* FlyingPress
* WP Rocket

9. What performance improvements do you realistically expect after migration?

* TTFB
* LCP
* CLS
* INP

(I am not asking for guarantees, only an estimate based on your experience.)

10. Will I receive a before-and-after report including:

* Issues found
* Unused files
* Optimizations performed
* Performance results

11. What is the estimated timeline for the project?

Finally, please provide your total fixed price including:

* Migration
* Optimization
* Cleanup
* Testing
* Post-delivery support.

Thank you.

I'm looking for a cybersecurity professional with experience in account recovery, digital incident analysis, and unauthorized access investigations.

Demonstrable experience, verifiable references, and adherence to legal and ethical standards are highly valued. If you offer these types of consulting services, please contact me via private message with information about your experience and work methodology.

Thank you.

We need an experienced website security specialist to remove malware from our website, restore full functionality, and harden the site against future attacks. The site is currently compromised (or suspected of being compromised), and we need a clean, professional fix — fast.

If you specialize in malware removal, blacklist recovery, and post-cleanup hardening, we want to hear from you.

Candidate must work on USA M-F 8AM-5PM schedule. No exceptions.

My Website is currently affected by a malware. It is a Wordpress site, hosted on hostinger. We turned off all the plugins to see if the malware is coming from a plugin but it still shows in wordpress after switching off all the plugins.

I did the scan on Hostinger but it is not detecting any malware.

We are looking for someone that help us fix the site quickly.

Hostinger AI is recommanding the following: I’ve shared a button to open Databases for forumcfo.com.

Quick check in phpMyAdmin:

Open your WordPress database.
Look first in wp_options, wp_posts, and wp_users.
Search for suspicious patterns like:
base64
eval(
gzinflate(
iframe
strange scripts or unknown domains
long random text blobs
In wp_users, check for unknown admin accounts.
In wp_posts, look for injected spam links or hidden code.
If you find something suspicious, don’t delete it yet—copy the row first or export a backup, then I can help you judge whether it’s malicious."