WordPress Security Expert Needed – Persistent Malware / Backdoor & Unauthorized Admin Accounts

URGENT! I am looking for an experienced WordPress malware/security specialist to investigate and permanently clean a compromised WordPress website hosted on Hostinger. The website has already been restored and cleaned several times, but the compromise keeps returning. ________ The site has shown multiple signs of persistent compromise: Unauthorized WordPress Administrator accounts are recreated after being deleted. Random administrator usernames have appeared. Fake-looking administrator accounts using @wordpress.org addresses have appeared. WordPress core files have been modified without authorization. Malicious/suspicious require_once statements were injected into core files such as: wp-includes/functions.php wp-settings.php One injected line attempted to load: wp-content/uploads/cache/readme.css Another attempted to load: wp-includes/ID3/license.txt .htaccess was previously modified with suspicious Googlebot-specific redirects to amp.php. A suspicious amp.php file appeared in the WordPress root. We restored from backup, reinstalled/updated WordPress core, removed suspicious code and deleted unauthorized administrators, but the infection returned. Please start your proposal with the words “PERSISTENT WP” so I know you read the full description.