WordPress Malware Removal & Hardening

Visitors are being redirected away from my WordPress site, so I know something malicious has slipped in. I need a thorough clean-up followed by hardening measures that stop the issue from coming back.

Here is what you should know before starting:
• The redirect is the only visible symptom—no security plugin alert so far, and I’m not even sure one is active.
• I keep a recent full backup, so you can work confidently and roll back if needed.

Your job is to:
1. Locate and remove every trace of malware from core files, themes, plugins and the database.
2. Patch or disable the vulnerability you discover, update WordPress, themes and plugins, and tighten file permissions.
3. Recommend and configure a reputable security plugin (Wordfence, Sucuri, or a tool you trust) so I can monitor the site going forward.
4. Provide a brief report outlining what you found, what you removed, and the exact steps taken to secure the site.

I have a modest budget of $10-20 for the entire task, so please keep your approach efficient and targeted. If you can deliver a clean, stable site and clear documentation within that range, let’s get started right away.