
Completed
Posted
Paid on delivery
Project description: Our WordPress site ([login to view URL]) was recently hit with malware. Sucuri has cleaned the infection twice in the past two weeks, but the site keeps getting reinfected because of outdated plugins and WordPress users that need to be cleaned up. We need an experienced WordPress developer to harden the site and prevent future reinfections. What's already been done: Sucuri firewall is active and SSL is working Malware has been cleaned by Sucuri (twice) Malicious /old WordPress installation has been deleted Site is no longer on Google Safe Browsing blacklist What we need you to do: Back up the full site using UpdraftPlus (already installed) before making any changes Update all 21 outdated plugins to their latest versions, including: Ajax Load More, Autoptimize, Contact Form 7, Contact Form 7 Dynamic Text Extension, Disable Gutenberg, Duplicate Page, Duplicator, Google Analytics for WordPress (MonsterInsights), Jetpack, Mailchimp for WooCommerce, MailPoet, Page Links To, Popup Maker, Redirection, Reorder Posts, Sticky Menu or Anything on Scroll, UpdraftPlus, WP SCSS, WP Super Cache, Yoast SEO, Advanced Custom Fields Pro Update WordPress core to the latest version Delete any fake/malicious plugins still present (lazy-loader, starter variants) Review WordPress admin users — delete any unrecognized accounts (one called "proformat" is suspicious) Change all admin passwords Install and configure two-factor authentication for all admin accounts Install and configure CAPTCHA on all public forms (contact, signup, checkout) Test the site thoroughly after updates to make sure everything still works properly Provide a brief report of what was done Access provided: WordPress admin login cPanel / FTP access as needed Sucuri dashboard (if needed) Requirements: Proven experience with WordPress security and malware prevention Positive reviews from previous clients Available to respond quickly during the job Must provide a backup before making changes in case of rollback To apply, please include: Your estimated timeline to complete Your flat fee for the full scope Any relevant experience with similar jobs (reinfection prevention, hardening) Whether you offer any reinfection guarantee
Project ID: 40376409
167 proposals
Remote project
Active 1 mo ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs

With a track record built on comprehensive knowledge of WordPress, WooCommerce, and Magento development over 8+ years, I am the perfect fit for your WordPress security upgrade and reinfection prevention needs. My experience with plugin customization, theme integration plus updates will be immensely valuable in resolving the malware issue plaguing your site. Moreover, in handling numerous projects similar to yours, I've learned how to optimize sites not only for speed but also to reinforce their security measures. I have sound familiarity with plugins such as Ajax Load More, Jetpack and Yoast SEO, all of which pop up on your update list. Additionally, I'm adept at using UpdraftPlus for efficient backup and preserving potential rollback options. What sets me apart is my thoroughness. In addressing your immediate needs like reviewing user accounts and updating passwords- I'll go a step further by implementing two-factor authentication on all admin accounts and CAPTCHA protection on public forms. Besides mitigating present threats, my solutions are oriented toward resilient continuity.
$50 USD in 1 day
6.8
6.8
167 freelancers are bidding on average $129 USD for this job

Hi, I hope you are doing well. I'm ready to help secure your WordPress site and prevent future malware issues. I'll ensure all plugins are updated, suspicious accounts are removed, and additional security measures like two-factor authentication and CAPTCHA are implemented. After completing the updates, I'll conduct thorough testing to ensure everything functions smoothly. Could you share more about any specific security features you prioritize beyond what's listed? What timeline are you aiming for to complete these updates? Is there a particular reason certain plugins were not updated previously, or were there compatibility concerns? Looking forward to securing your site effectively! Best, Azeem Amin
$250 USD in 7 days
9.1
9.1

Hi, I can help harden your WordPress site and implement the necessary updates. I will start by backing up the site with UpdraftPlus, then I’ll update all outdated plugins and the WordPress core. I’ll ensure the removal of any malicious plugins and suspicious admin users, change all passwords, and install two-factor authentication along with CAPTCHA on public forms. With over 10+ years of experience in WordPress security and a strong track record in malware prevention, I am confident I can enhance your site’s security. I will also provide a brief report of the changes made. I’m available to get started right away. Let me know if you want to proceed. Best Regards, Priyanka
$140 USD in 2 days
8.5
8.5

Hello, I will first take a complete backup (UpdraftPlus), then clean and update all plugins/core, remove malicious files/users, secure access (password reset + 2FA + CAPTCHA), and harden the site (file permissions, firewall rules, vulnerability fixes) with full post-testing. With 10+ years of experience in WordPress security and malware recovery, I’ve handled repeated reinfection cases and implemented permanent fixes. Let’s connect in chat to start immediately and secure your site. thank you Regards Gaurav Garg
$140 USD in 7 days
8.6
8.6

Hello, It's great to speak with you about your new project..!! I understand issue on website and server malware's effect, for clear this issue we have to perform following actions please review carefully 1. Changes all password (Website and server) 2. Remove all backdoor, no one can access server and there files without permission 3. Scan entire server/code files and database 4. effect files repair and update with system 5. unused php extn and any other content remove form server 6. create logs to proper tracking and make sure same type of issue not comes again 7. handover project to you back Ping us for more better discussion Best Deva
$120 USD in 2 days
7.8
7.8

Hello, with 6+ years securing WordPress sites and preventing reinfections, I see you need to fully clean, update, and harden your site after repeated malware issues. Recent work: cleaned and secured a hacked WooCommerce site with zero reinfections; hardened a WordPress site with plugin cleanup and 2FA setup. My plan is to backup, update core/plugins, remove threats, secure users, add 2FA/CAPTCHA, and test fully. Do you want ongoing monitoring? Any uptime constraints during updates? I’d love to discuss your project requirements further.
$100 USD in 7 days
7.8
7.8

Woah Hello, It looks like you're dealing with a frustrating situation regarding your WordPress site and repeated malware reinfections. I can help you secure your site effectively by updating all outdated plugins and the WordPress core, cleaning up any malicious users, and enhancing your security with two-factor authentication and CAPTCHA. My approach will ensure that your site is not only cleaned but fortified against future attacks. With 7+ years of experience in WordPress security and malware prevention, I’ve tackled similar issues and know the best practices to implement. I’ll also make sure to take a full backup using UpdraftPlus before making any changes, so you have peace of mind throughout the process. Looking forward to helping you get your site back to a safe and secure state. Best regards, Ivan Mandinski
$50 USD in 3 days
7.5
7.5

Hi I will fix security issues mentioned in your WordPress website. I am available to discuss further.
$49 USD in 1 day
7.5
7.5

Hi, I can secure your WordPress site by updating all outdated plugins, removing malicious remnants, cleaning suspicious users, enabling two factor authentication, adding CAPTCHA, and hardening core files so reinfections stop entirely. I will back up the full site first, then perform safe updates, delete fake plugins, reset admin credentials, and verify everything works smoothly. You will receive a clear report and a stable, protected installation. Let’s discuss in chat as I have some queries to ask regarding the project to proceed further.
$100 USD in 7 days
7.1
7.1

Hi, I can secure and harden your WordPress site to stop reinfections permanently. I’ll start with a full backup, update all plugins and core safely, remove any malicious files/plugins, clean up users, enforce strong passwords, and set up 2FA and CAPTCHA. I’ll also review vulnerabilities causing reinfection, apply security best practices, and thoroughly test the site to ensure everything runs smoothly. A clear report will be provided after completion. Best regards, Ihtsham
$40 USD in 1 day
7.2
7.2

Hi, I’m a FlutterFlow + Supabase developer with strong experience building wellness apps with clean UI, secure data handling, and scalable architecture. I can implement your app with proper RLS, smooth data flows, and efficient APIs. I focus on fast delivery, performance, and clear documentation for future scaling. Ready to start immediately—let’s build your MVP. Thanks, Jay
$140 USD in 7 days
6.7
6.7

I will secure your WordPress site by updating all plugins and removing malicious users to stop the malware from returning. I have fixed many infected websites and I know how to make your site safe again. Please let me know when we can talk about this project. Thank you, Saeed
$250 USD in 2 days
6.7
6.7

As an experienced full-stack developer with a decade of working in WordPress under my belt, I am confident that I am the best fit for your project. I specialize not only in WordPress development, but also in web application security and third-party integrations - skill sets that are crucial for upgrading your platform to be more robust and resilient against malware threats. I have a sharp eye for identifying outdated plugins and suspicious user accounts - addressing precisely the issues that have caused reinfections on your site. In terms of process, I have an extremely organized and structured approach to project management, thus minimizing any need for back-and-forths. My thoroughness ensures that no malicious plugin or fake account goes unnoticed and all are efficiently resolved before bringing your website up-to-date with the latest WordPress core. Beyond this, I always ensure to provide a backup before making any changes to prevent complications down the line.
$100 USD in 7 days
7.2
7.2

Hi, I’m very interested in helping to do security upgrade and reinfection prevention. Could you please provide cPanel access so I can begin working on it? I offer a free fix with a guarantee against reinfection. Best regards, Steven
$100 USD in 2 days
6.7
6.7

With regard to your immediate and persistent issue with your WordPress site, I strongly believe my skills and dedication as a web developer make me the ideal candidate to remedy the situation. Throughout my tenure in the industry, I have amassed substantial knowledge in HTML, PHP, Web Security and most notably WordPress handling including vulnerability identification, resolution, and fortification. My proficiency in these areas allows me to fully comprehend the intricacies of cleaning up malware attacks, ensuring comprehensive security upgrades, and preventing future reinfections. I have also had remarkable success stories with several individuals and businesses who suffered similar Wordpress security breaches as yours. Understanding the imperative sensitivity of time in this project, I assure prompt response and availability throughout the process to ensure that all aspects are tended to meticulously. Furthermore, my past clients have always appreciated my attention to detail. Given this project's is history of repeated reinfections, you can definitely rely on me to provide a practical long-term solution that will secure your site impeccably.
$150 USD in 2 days
6.4
6.4

Hello, I appreciate you sharing your project details with me. I'm eager to assist in turning your ideas into reality. With over 8 years of experience in WordPress security and malware recovery, I specialize in cleaning, hardening, and preventing reinfections for compromised websites. I can secure your site end-to-end by first creating a full backup via UpdraftPlus, then safely updating all plugins and WordPress core. I will remove any malicious plugins/files, audit and clean admin users, reset credentials, and implement 2FA + CAPTCHA across all entry points. I also perform hardening (file permissions, wp-config security, login protection, disabling vulnerabilities) to stop reinfection at the root. Timeline: 1–2 days Flat Fee: $120 Experience: Multiple reinfection cases resolved with long-term fixes Guarantee: 14-day reinfection support (with monitoring guidance) You’ll receive a full report and a fully secured, stable website. I look forward to the chance to work together and help make your project a success. Warm regards, Sush
$120 USD in 2 days
6.3
6.3

My extensive experience as a Full Stack developer and Digital Solutions Expert for over a decade makes me well-equipped to handle your WordPress security upgrade and reinfection prevention needs for your site crustnation.com. I've successfully done this for more than 100 clients, which has made their websites safer, easier to manage as well as performance optimized. My skills include not only cPanel management but also HTML, PHP and Web Security which are critical to solving the problem at hand. Pricing the entire scope fairly and promising speedy delivery without compromising quality of work is key to my ethos. Post upgrade, I will test the site profoundly to assure complete functionality and generate a detailed report on what was done. My expertise with WordPress security has earned me consistently fantastic reviews from previous clients which deeply aligns with your project needs — an experienced professional who can guarantee safety with dexterity and maintain transparency throughout the process. Don't let security concerns hinder your online reputation further, choose Prajapati Technologies to solidify your virtual stronghold!
$200 USD in 7 days
6.4
6.4

It’s exhausting to keep seeing your site reinfected even after multiple cleanups, especially when outdated plugins and suspicious users keep leaving doors open for attackers. The risk of downtime, lost trust, and constant firefighting is both frustrating and costly for your team. You can expect a fully updated, hardened WordPress site with all vulnerabilities closed, so you can finally stop worrying about repeat infections. First, I’ll back up your entire site with UpdraftPlus before touching anything. Next, I’ll update all plugins and WordPress core, remove any fake plugins and suspicious users, and lock down admin access with new passwords, two-factor authentication, and CAPTCHA on forms. Finally, I’ll test everything to make sure your site works smoothly and provide a clear summary of what’s been secured. Is there a specific deadline you’d like all security upgrades completed by?
$138 USD in 7 days
6.2
6.2

Hi I can help you fully clean, harden, and stabilise your WordPress site so it stops getting reinfected and stays secure long-term. I’ve worked on multiple compromised WordPress installations where the real issue wasn’t just malware removal but persistent reinfection caused by outdated plugins, hidden admin users, and weak access controls. A common problem in situations like yours is that even after cleanup tools like Sucuri run, leftover vulnerabilities in plugins or rogue admin accounts quietly reopen the door for reinfection. I solve this by doing a full controlled cleanup workflow: verified backup first, complete core and plugin updates, deep audit of user roles, and removal of any suspicious or duplicate installations. I’ll also review your current plugin stack and remove anything unnecessary or high-risk, especially outdated or redundant utilities that increase the attack surface. On top of that, I’ll implement proper hardening steps including 2FA, CAPTCHA protection, and tightened admin permissions. I’ll then test key site functions like forms, checkout, caching, and SEO plugins to ensure nothing breaks after updates. Finally, I’ll provide a clear security report so you know exactly what was changed and how the site is protected going forward. Thanks, Hercules
$200 USD in 7 days
6.3
6.3

Hi, Looks like the issue isn’t the malware itself anymore, but the attack surface staying open through outdated plugins and weak access control, which is why it keeps coming back even after Sucuri cleanup. I’d start with a full UpdraftPlus backup and verify restore integrity before touching anything. Then update plugins in controlled batches rather than all at once to catch conflicts early, especially with things like ACF Pro, WooCommerce-related plugins, and caching layers. After that, core update, removal of any leftover suspicious plugins or files, and a full user audit including password resets. The important part is hardening. I’d enforce 2FA on all admins, limit login attempts, add CAPTCHA to forms, and check file permissions and wp-config exposure. I’d also review cron jobs and hidden backdoors, since reinfections often come from missed entry points rather than visible plugins. One thing to watch is plugin compatibility after updates, especially with 21 plugins involved. There’s also a chance of hidden injected code in theme files, so I’d scan those as well. Timeline is about 1–2 days depending on testing. I can give a fixed fee once I take a quick look at the current setup. I don’t offer a blanket guarantee, but I do make sure the common reinfection paths are properly closed. Let me know if you want me to review access first. Thanks, Denis.
$150 USD in 2 days
6.0
6.0

Stopping WordPress reinfection after cleanup is where I step in because cleaning alone never fixes the root cause. Your situation is textbook. Sucuri cleans the malware but 21 outdated plugins and suspicious admin accounts like "proformat" keep reopening the door. I'll back up via UpdraftPlus first, update all 21 plugins and core, remove fake plugins like lazy-loader and starter variants, audit admin users, enforce 2FA and CAPTCHA, then test everything thoroughly and deliver a full report. Did this exact job for a WooCommerce site reinfected three times. Hardened it in one day, zero reinfections in six months. I offer a 30-day reinfection guarantee. Can you confirm whether all 21 plugins listed are actively needed, or are some candidates for removal to reduce your attack surface further?
$90 USD in 2 days
5.9
5.9

Miami Beach, United States
Payment method verified
Member since Feb 19, 2025
$250-750 USD
$1500-3000 USD
€30-250 EUR
₹750-1250 INR / hour
$1500-3000 USD
$10-30 USD
$10-30 USD
$10-30 USD
$30-250 USD
₹600-1500 INR
$30-60 USD
$30-250 USD
₹600-1500 INR
$30-250 USD
$10-30 USD
₹600-1500 INR
$250-750 USD
₹3000-4000 INR
₹12500-37500 INR
₹12500-37500 INR
$750-1500 USD