Budget: 1111 UAH Deadline: 1 day
Good day! I did something similar on my old WP site — cleaned injections through xmlrpc and removed extra users. Without access to hosting, I will clean through the admin panel: I will find and delete malicious code in the theme/plugins, erase foreign users, update the core and everything else, and install Wordfence. I can manage it by Monday morning. One clarification: can WP REST API/XML-RPC be completely disabled, or are there integrations that use it?
Budget: 1100 UAH Deadline: 3 days
Good day, I have over 5 years of experience in development, often working with the support and recovery of WordPress sites.
I will restore your site, remove malicious code, update modules, and install antivirus; the cleaning settings are tailored individually for each case.
I created a corporate website for a consulting company from scratch.
We will prepare a working version by Monday morning. I will provide the exact cost after a few clarifications or in private messages.
Are there specific plugins that must be kept, or can everything be cleaned except for the content?
Feel free to reach out!
Budget: 2500 UAH Deadline: 1 day
Hello! I have extensive experience in fixing WP websites and will do everything quickly and efficiently. However, it will be difficult without hosting. Feel free to reach out.
Budget: 3500 UAH Deadline: 3 days
Andrey, good afternoon.
The site can be restored, but I will immediately point out an important moment: access to WP Admin alone is not enough for guaranteed cleaning. Malicious code and backdoor files may be located in wp-config.php, mu-plugins, uploads, cron tasks, the database, or even outside the WordPress folder.
I propose the following order of work:
Create a full backup of files and the database.
Check users, active sessions, and suspicious administrators.
Scan the core, plugins, themes, uploads, cron, and the database.
Remove injections and backdoor files.
Reinstall the WordPress core from the official source.
Update or replace vulnerable plugins and themes.
Change passwords, keys, and security salts.
Set up basic protection, monitoring, and backups.
Check the site after cleaning and ensure that the infection does not return.
For full work, temporary access to the hosting panel or SFTP/FTP and the database will be required. If access is only possible to WP Admin, I can perform diagnostics and the available part of the cleaning, but without a guarantee of removing all backdoor files.
The cost of full cleaning is 3500 UAH, the timeframe is up to 3 days after receiving the necessary access. Work through "Safe."
Please let me know: is it possible to obtain temporary access to hosting through the provider's support, and is there a backup of the site before the hack?
Budget: 3200 UAH Deadline: 3 days
An infected WordPress site without access to hosting and the database is a separate challenge, but it can be resolved through the admin panel.
I will clean the database and files from unauthorized users and malicious code, update the core, plugins, and themes, and install antivirus for monitoring.
I will have it done by Monday; the site will be clean and functional.
Budget: 3600 UAH Deadline: 3 days
Worms usually sit not only in the base but also in plugins, themes, and cron tasks, so I will clean through the admin panel since there is no access to hosting and the database.
I will check users, remove suspicious plugins and themes, clean up injections in posts, update the core and components, and install Wordfence.
I will be done by Monday. Can I install the File Manager plugin to work with files without hosting access?
Budget: 1111 UAH Deadline: 5 days
Ready to help restore the website to working condition and remove malicious code.
Situation: there are worms and unnecessary accounts in the system, so the priority is to regain control over the site and preserve the previous content.
An important nuance: without access to hosting and the database, the cleanup may be incomplete, as some backdoors are often outside the WordPress panel.
Is there a recent backup of the site before the hack?
Budget: 1111 UAH Deadline: 2 days
The website has been hacked, infected, and hasn't been updated for a long time — everything needs to be cleaned up and restored to working condition by Monday morning.
Plan: First, I will scan all files and the database through WP Admin + File Manager (if the hosting provides access) or using the Wordfence/MalCare plugin, find malicious code, backdoor files, and unauthorized users. I will delete infected files and clean the database from injections. Then, I will update WordPress, all plugins, and the theme. I will install Wordfence (or an equivalent) with basic firewall rules and close standard entry vectors.
Risk: Without access to hosting/FTP, some files may be inaccessible through WP Admin — if the hosting has blocked the panel or files are outside the webroot, at least FTP access is needed. This is critical.
Is it possible to request at least temporary FTP access from the host, or only WP Admin?
