Google ads disapproved due to compromised site

My website “bayviewfamilydental.com” was created on Wordpress ~ 2008. I’ll try to give you as much knowledge as possible in regards to the history. I updated it once ~2018 to comply with mobile phones screensizes. I like the website because I can easily update team members and photos using visual composer. However, other than that I haven’t touched the website. I tried updating wordpress version once but broke the website/“visual composer” plugin so I restored to a previous backup. I know Google is constantly updating its policies and it says it still detects a compromised site/“malicious entity” hidden in my Website. I believe it’s an outdated theme author “mnky studios”. However, I’m not sure if it requires a total overhaul due to outdated Wordpress, plugins or themes. Any help would be appreciated I’ve created a staging website with Wordpress 7/php 7.4. Not sure if we need a complete overhaul, but if we can’t get Google approval for ads, we can possibly create a new website and copy over the same menu structure, texts, photos. Doesn’t have to be exactly the same. But colour schemes and logos can be refreshed. Seo would be an added bonus as I haven’t been able to advertise in a year+.