WordPress Malware Cleanup & Security Fix

I need an experienced WordPress security/malware cleanup specialist to clean and secure my website: https://going-natural.com. The site is an established WordPress website with many years of valuable content. It appears to have been compromised and is currently showing/inserting unrelated spam content, including gambling, pharmaceutical and other SEO spam. My hosting provider is Hostinger. Their dashboard currently shows: See the attachment. You will get access for an easy cleanup. Malware cleaned 23 vulnerabilities detected 14 plugin updates available WordPress 6.8.8 Active theme: Themify Ultra 8.0.5 Site Health: Action Needed What I need you to do Fully inspect the WordPress installation for malware and unauthorized code. Verify that the Hostinger malware cleanup has actually removed the infection. Remove any remaining malicious files, scripts, redirects, spam injections or backdoors. Find and remove any unauthorized WordPress administrator/user accounts. Check the WordPress database for injected spam content, malicious links and/or hidden SEO spam. Check plugins and themes for vulnerabilities and compromised files. Update WordPress, plugins and themes where appropriate. Remove unused or vulnerable plugins/themes if they are no longer needed. Check .htaccess, wp-config.php, theme files, plugins, mu-plugins, uploads and other common locations for malicious code. Check for redirects or cloaking that may only appear to search engines or certain visitors. Make sure the website functions normally after cleanup and that existing articles/content are not accidentally deleted. Check Google/Search Engine spam issues if applicable and advise what needs to be done in Google Search Console after the cleanup. Recommend basic security measures to prevent reinfection. VERY IMPORTANT Do not delete legitimate posts, pages, images or historical content simply because they look old or unusual. This is an old website with a large archive, so preserving the existing content is very important. Please make/verify a full backup before making major changes. I am looking for someone who understands WordPress malware cleanup and security, not someone who will simply run an automated scanner and declare the site fixed. Deliverables: At the end of the job I want: Website functioning normally Malware/backdoors removed Spam content/injections removed Unauthorized users removed Vulnerable plugins/themes addressed WordPress and necessary plugins updated No unexpected redirects No obvious malicious code remaining A brief summary of what was found and what was fixed A list of any remaining security recommendations Access The website is hosted on Hostinger. I can provide the necessary WordPress/hosting access to the selected freelancer. Please do not make any major changes before discussing them with me. To apply Please tell me: How many WordPress malware cleanups have you done? Have you worked with Hostinger before? What malware/security tools do you normally use? Can you check the database as well as the WordPress files? Have you dealt with SEO spam/hacked WordPress sites before? Please provide 1–2 examples of similar WordPress cleanup jobs you have completed. I prefer someone who can diagnose, clean and secure the site in one job, rather than someone who wants to rebuild the entire website.