WordPress Malware Cleanup & Hardening -- 3

My WordPress site shows clear signs of malware across both the admin area and the public-facing pages. I attempted a manual cleanup, but traces of the infection keep resurfacing. I need an experienced security specialist to: • Perform a deep scan to identify all malicious code, backdoors, and database injections. • Safely remove every infection without disrupting existing content or functionality. • Patch core, theme, and plugin vulnerabilities, replacing compromised files where needed. • Harden the installation—strong login rules, file permissions, firewall or reputable security plugin configuration, and any other best-practice measures. • Provide a concise post-cleanup report summarizing what was found, what was fixed, and actionable steps I can take to prevent future attacks. You should be comfortable working with cPanel/FTP, phpMyAdmin, and common WordPress security tools such as Wordfence, Sucuri, or iThemes Security. Quick turnaround and clear communication are important, as the site is live.