URGENT: WordPress Malware Removal + Full Security Hardening (Site Keeps Changing by Itself)

My WordPress website is infected with malware. Files and content keep changing on their own even after fixes, so there’s likely a hidden backdoor. I need someone to clean it completely and lock it down so it doesn’t come back. I’ll share the website URL with shortlisted freelancers in chat. What I need: Full scan of files and database, and removal of all malware, backdoors and injected code Find and fix how the hacker is getting in (the reason it keeps coming back) Remove any unknown admin users, suspicious plugins, cron jobs or files Basic security setup (firewall, login protection, updates) so it doesn’t happen again Requirements: Proven experience with WordPress malware cleanup, especially reinfection cases Take a full backup before making changes Don’t break the existing design or content Deliverables: Clean, working website that stays clean Clean scan result (e.g. Sucuri SiteCheck) Need this done within 2–3 hours. Please share similar work when applying.