WordPress Hack Recovery & Site Cleanup — Media Library & Posts Restoration

My WordPress site was recently hacked and I restored a backup. The site is back up but I need help cleaning everything up properly. What I need done: Security audit & hardening — scan for any remaining malware or backdoors, update all plugins, configure Wordfence or Sucuri, enable 2FA Restore missing media — posts exist but are missing their featured images and photos. Images may still be on the server under wp-content/uploads but are disconnected from the media library Fix draft posts — several previously published posts reverted to draft status and need to be reviewed and republished Recover missing articles — search the Wayback Machine (web.archive.org), Google cache, and any other available archives to find and restore articles that are missing entirely from the site General cleanup — remove any unknown admin accounts, harden wp-config and file permissions, check for suspicious files My setup: Hosted on Hostinger WordPress 6.9 I have full Hostinger and WordPress admin access What I need from you: Fix the above issues Deliver a short written summary of what you found and what was done Do not make any major changes without checking with me first