WordPress Security Expert Needed

I need a WordPress security expert to perform a final security check on my site. The site was recently hit with a fake and malicious Cloudflare Captcha/Turnstile issue. The task involves ensuring all security measures are in place and the site is fully protected. This requires an expert level of proficiency to ensure the site's integrity and security. Details: i need a wordpress security expert to help do a final security check on my site which was hit with a fake and malicious cloudflare captcha/turnstile page that would prompt users to download an executable/powershell situation. Used MalCare to identify a bootstrap plugin, hidden, that was creating users for my site and that must have been the vector. Need to see if that backdoor enabled or created any kind of other malicious install on the site. I am not sure we have found the issue yet. We do not use cloudflare.