
In Progress
Posted
The WordPress installation hosted on my GoDaddy cPanel has been compromised: core files and several custom themes are infected, and indicators point to SQL injection, cross-site scripting and phishing code that resulted in a fully hacked site. I have already isolated the account at the server level; everything else—diagnosis, removal, patching and preventive work—still needs to be done. cPanel access, WordPress admin credentials and GoDaddy account control will be provided as soon as the project starts. Feel free to use SSH, phpMyAdmin, WP-CLI, ImunifyAV or any other standard tooling you consider appropriate, provided no legitimate data is lost in the process. Deliverables • Complete malware removal from WordPress core files and affected themes • Closure of all discovered SQL injection, XSS and phishing vectors • Hardening actions inside cPanel and [login to view URL] (file permissions, salts, firewalls, .htaccess rules, cron cleanup, etc.) • Update of WordPress, themes and plugins to their secure, current versions • Post-clean scan report summarising actions taken and tests passed • Optional 30-day monitoring script or security plugin configuration to confirm the site stays clean Acceptance criteria The site must load without malicious redirects, pass a clean scan on VirusTotal, Sucuri SiteCheck and ImunifyAV, and score an “A” on Wordfence diagnostics once you are finished. The sooner the environment is stabilised, the better; please let me know your estimated turnaround time and any specific information you need from my side before you begin.
Project ID: 40408142
94 proposals
Remote project
Active 18 days ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs
94 freelancers are bidding on average $21 USD/hour for this job

Hi, This is Elias from Miami. I have gone through your project description and understand you’re looking to clean up and harden your compromised WordPress installation on GoDaddy cPanel. It’s crucial to ensure your site is secure and runs smoothly. With over 10 years of experience in web development and security, I specialize in WordPress and have successfully handled similar situations before. I’ll assess the compromised files, remove malware, and implement security measures to prevent future attacks. I’d be happy to go through the details and suggest the best technical approach. Here’s a simple project plan: 1. Initial assessment and malware cleanup. 2. Hardening WordPress security (plugins, settings, etc.). 3. Final review and recommendations for ongoing security. I have a few questions to get a better understanding: Q1 – Are there specific plugins or themes you want me to focus on during the cleanup? Q2 – Do you have any existing security measures in place that I should consider? Q3 – What is your timeline for completing this project? Looking forward to hearing from you.
$50 USD in 5 days
8.1
8.1

Malware Removal, Virus Removal, Website Hack Recovery, Security Analyst expert with 7+ years of experience. I have personally cleaned, resolved, and corrected over 100+ sites by hand in the past 7 years, and have a 100% success rate. Recently I have successfully done a similar task. please check our Job board. I am interested in working on your project, and I will start working on it as soon as this project contract is finalized. My main services: 1. Clean up of malware, viruses, phishing, malicious code, spam, and a backdoor from WordPress, PHP, Joomla, and other open-source platforms and custom-coded sites. 2. Hardening website security to prevent future infection or hacking on sites and servers. 3. Securing sites from future hack attempts. I can provide maximum security for your site. I will take a complex security audit + install security plugins + set up files/folders permissions + set up .htaccess rules + my private trick = an unbreakable site. Please share the website details so I can check things and come up with a proper execution plan for site security. Looking forward to your positive response and a great working relationship. Thank You..!!!
$16 USD in 20 days
8.4
8.4

Hi, I'm a Senior Wordpress Developer & Security Expert. Here is what I will do: 1. I will remove malware from core files and themes. 2. Close SQL injection, XSS, and phishing vectors. 3. Harden cPanel and wp-config with secure rules. 4. Update WordPress, themes, and plugins. 5. Provide clean scan report and monitoring setup. With my expertise of 6+ years, I can do the job fulfilling your needs.
$15 USD in 40 days
7.1
7.1

hello sir, I will fullfill your all mentioned requirements "The site must load without malicious redirects, pass a clean scan on VirusTotal, Sucuri SiteCheck and ImunifyAV, and score an “A” on Wordfence diagnostics once you are finished." Let we discuss more so that I can explain you everything whatever I will follow for scanning step by step. Thanks
$15 USD in 10 days
7.3
7.3

Hello, I understand your WordPress site was compromised with SQLi, XSS and phishing code and needs a full clean, patching, hardening, plus a secure update of core, themes and plugins. I will start with a thorough diagnosis using SSH/phpMyAdmin/WP-CLI and ImunifyAV, identify all malicious code, remove infected core files and themes, close all injection vectors, and apply hardening in cPanel and wp-config.php. I’ll tighten file permissions, refresh salts, implement robust firewall rules, review and fix .htaccess, clean cron jobs, and ensure a clean backup strategy. I will update WordPress and extensions to current secure versions, run post-clean scans, and provide a final report with actions taken and tests passed. If you want extra safety, I can configure 30-day monitoring with a security plugin. I will communicate progress and keep data safe while preserving legitimate content. What is the earliest time you can grant access and which backup will you rely on for recovery if needed? Best regards, Shamshad
$25 USD in 39 days
7.1
7.1

Hello, I’ve handled deeply compromised WordPress installs on cPanel, including SQL injection, XSS, and phishing cleanup using WP-CLI, SSH, and database auditing. I’ll surgically remove malware, patch vectors, harden configs, update everything, and validate clean scans across Wordfence, Sucuri, and ImunifyAV with monitoring in place plus detailed post-clean report Thanks- Webcast Technology
$21 USD in 1 day
6.7
6.7

Hi, Your WordPress site has been compromised, and I will swiftly clean up the malware, close all security vulnerabilities, and harden your site to prevent future attacks. You can expect a fully restored and secure website with updated core files, themes, and plugins. I will handle the entire process diligently, ensuring that your site is thoroughly cleaned without any data loss. You will receive a detailed report summarizing the actions taken and the measures implemented to enhance your site's security. What specific customizations have you made to your themes that I should be aware of during the cleanup process? Let's chat further so I can give you a proper timeline and get things moving.
$25 USD in 40 days
6.4
6.4

Hello, With 4 years of experience in WordPress, Web Development, PHP, and Web Security, I am well-equipped to handle your WordPress Malware Cleanup & Hardening project. I understand the severity of the situation and the importance of securing your website against SQL injection, XSS, and phishing attacks. I have carefully read through your requirements and am confident in my ability to effectively remove malware from WordPress core files, implement necessary hardening measures, and update all components to ensure a secure environment. I am proficient in using tools like phpMyAdmin, cPanel, and SSH for this task. Please feel free to connect in chat to discuss further details and requirements. I am open to addressing any specific concerns you may have. Best regards, Taimoor from Pixels Soft
$20 USD in 40 days
6.6
6.6

⭐⭐⭐⭐⭐ Hi I will thoroughly clean and secure your compromised WordPress installation, removing all malware from core files, themes, and the database while preserving your legitimate data. Using tools like SSH, WP-CLI, and malware scanners, I’ll identify vulnerabilities such as SQL injection and XSS, patch them, and restore your site to a safe state. I’ll also harden the installation with security best practices, updates, and preventive measures to avoid future attacks. Clear communication and careful handling will ensure a fast and reliable recovery process. PORTFOLIO LINK:- https://www.freelancer.com/u/suritaverma Thanks & Regards Surita (Freelancer) P.S. - If you'd like me to send over some of my work please don't hesitate to let me know!
$20 USD in 40 days
6.6
6.6

Hello, I understand your WordPress site has been compromised with malware, including SQL injection, XSS, and phishing code. I can definitely help with the diagnosis, complete removal from core files and themes, patching vulnerabilities, and implementing security hardening measures within cPanel and WordPress. Rest assured, I'll ensure your site is cleaned and secured effectively. Regards, Parvesh M.
$15 USD in 30 days
6.4
6.4

Hello, I can help clean your hacked WordPress installation and secure the full GoDaddy cPanel environment with a careful, no‑data‑loss approach. I’ve handled similar infections involving core file compromises, bad themes and SQL injection traces, and I make sure everything loads clean afterwards. I’ll work through the malware removal, patch the vectors, harden the server and update everything so it passes all the scans you mentioned. Thanks, Teo
$25 USD in 27 days
6.5
6.5

Hi - the critical part here is not just removing visible malware, it’s identifying how the attack got in and closing that path so it doesn’t happen again. I’d start with a full file + database audit before restoring anything live. Account is isolated - scan runs (core, themes, uploads, DB) - injected code is removed - wp-config, salts, and permissions are reset - vulnerable plugins/themes are patched or replaced - .htaccess and firewall rules are tightened - clean version is tested - site goes live - external scans are verified. Looks correct, but fails when a hidden backdoor remains in uploads or database options. Missed entry points can reinfect the site in real use, so I handle it with integrity checks, log review, and full credential rotation. I’ll ensure: - Clean core + themes (no injected code) - SQL/XSS vectors closed (input sanitization + config hardening) - WordPress + plugins fully updated - Wordfence / Imunify / Sucuri passing clean The part to get right early is finding the original entry point, not just cleaning symptoms.
$25 USD in 40 days
6.1
6.1

Hello, I came across your project WordPress Malware Cleanup & Hardening and I am very interested in working with you. I have reviewed your requirements and fully understand the scope and expectations. I specialize in PHP, Web Security, WordPress, MySQL, phpMyAdmin, Web Development, Website Optimization, cPanel and have successfully delivered similar projects before. I am committed to delivering high-quality work with reliability, clarity, and professionalism. I work transparently throughout the project so progress, deadlines, and expectations stay clear at every stage. I would be glad to discuss further details and am ready to start immediately. Looking forward to hearing from you. Regards, Anum
$25 USD in 40 days
5.6
5.6

Hello!, I am a Florida-based senior software engineer with over 15 years of experience in web development, including WordPress security and optimization. I carefully read your project description and understand the urgency of cleaning up your compromised WordPress installation on GoDaddy. To help me better understand the project, could you please clarify the following questions? 1. What specific symptoms are you experiencing that indicate the malware infection? 2. Do you have a backup of the site, or will I need to work with the current compromised setup? My expertise in PHP, MySQL, and web security positions me well to not only clean the malware but also harden your site against future threats. I recommend starting with a thorough scan of your core files, followed by securing your cPanel settings and implementing best practices for WordPress security. In the past, I have successfully helped clients enhance their WordPress sites, providing similar services to ensure both functionality and security. I take pride in delivering on time and paying attention to every detail, ensuring your site is robust and reliable. I am committed to providing you with the best possible outcome. Let’s chat about how I can help you regain control of your website! -James
$50 USD in 5 days
5.4
5.4

Hello! I’ve carefully reviewed your project on WordPress malware cleanup and hardening, and I understand the urgency in ensuring your site is secure and functional again. With over 10 years of experience in PHP, web security, and WordPress development, I’m confident that I can effectively address the core file issues and implement robust security measures. I’ve successfully worked on projects like a local business website that faced similar security challenges, a blog platform that required optimization after a breach, and a small e-commerce site needing hardening against attacks. Each project not only restored functionality but also improved security protocols. To better understand your needs, could you please clarify the following questions? 1. Are there any specific security measures you’d like implemented beyond the cleanup? 2. Do you have a timeline in mind for this project, especially regarding when you need the site back up and running? 3. Have you noticed any specific vulnerabilities or unusual activity that could give insights into the breach? I’m ready to dive in and ensure your website is not just cleaned up, but fortified against future threats. Looking forward to discussing this further! Best regards.
$25 USD in 5 days
6.0
6.0

Hello! I recently recovered a fully compromised WordPress site affected by malware, SQL injection, and phishing scripts, restoring it to a clean and secure state without data loss. This experience directly aligns with your situation, as I can quickly diagnose infection points, remove malicious code from core files/themes, and close all vulnerabilities causing the breach. I will perform a full cleanup using WP-CLI and security tools, patch SQLi/XSS vectors, harden your cPanel and WordPress (permissions, salts, firewall rules, .htaccess), and safely update all components to current versions. With strong expertise in WordPress security, malware removal, server hardening, and vulnerability patching, I am confident I can stabilize your site quickly and ensure it passes all security scans. Estimated turnaround: 24–48 hours depending on severity. I am ready to start immediately and will provide a full report and optional monitoring setup. Thank you for reviewing the proposal. Abudulhamid
$20 USD in 40 days
5.2
5.2

Greetings, It looks like your WordPress site has faced some serious security issues, and I’m here to help you get it back on track. My approach will involve a thorough diagnosis of the compromised files and themes, followed by complete malware removal to eliminate any threats. Once that’s done, I’ll secure your site by addressing SQL injection and XSS vulnerabilities and implementing hardening measures in cPanel and wp-config.php. I’ll ensure that your WordPress, themes, and plugins are updated to their latest versions and provide you with a detailed report after the cleanup. Additionally, I can set up monitoring tools to keep your site safe moving forward. You can count on me to make sure your site is clean and secure, passing all necessary scans. Best regards, Muhammad Arshman
$20 USD in 40 days
4.8
4.8

Hello, I am Vishal Maharaj, a seasoned professional with over 20 years of expertise in PHP, WordPress, MySQL, Web Development, Website Optimization, Web Security, and cPanel. I have carefully reviewed the requirements for the WordPress Malware Cleanup & Hardening project. To address the compromised WordPress installation, I will conduct a thorough diagnosis to identify and remove malware from core files and themes. I will implement necessary security measures such as closing SQL injection, XSS, and phishing vectors, and perform hardening actions within cPanel and wp-config.php. Additionally, I will update WordPress, themes, and plugins to secure versions and provide a detailed post-clean scan report. Please initiate the chat to discuss further details and initiate the project. Cheers, Vishal Maharaj
$20 USD in 40 days
5.8
5.8

Hi, this is Kris from McKinney, Texas, I've reviewed your project requirements and understand the urgency of cleaning up the malware infection on your WordPress site hosted on GoDaddy. The key challenges include identifying and removing the malicious code while ensuring no legitimate data is lost during the process. My approach will involve conducting a thorough scan to identify and remove malware from the core files and affected themes. I will then proceed with closing all SQL injection, XSS, and phishing vectors, followed by implementing necessary hardening measures to secure your site against future attacks. A few additional questions: Q1: Are there any specific plugins or custom functionalities on your site that may have been affected by the malware? Q2: Do you have any recent backups of your site that can be used for restoration purposes? Q3: Have you experienced any performance issues or unusual activities on your site recently? Best regards, Kris Kramer
$25 USD in 40 days
4.8
4.8

Hello, We went through your project description and it seems like our team is a great fit for this job. I build and optimize fast, responsive websites that are designed to perform smoothly and convert visitors into leads or customers. Please come over chat and discuss your requirement in a detailed way. Best regards, Khadija Amin freelancer.com/u/khadijaamin9
$15 USD in 40 days
4.2
4.2

Gautier, United States
Payment method verified
Member since Sep 18, 2025
$750-1500 USD
£10-20 GBP
$300-390 USD
$30-250 CAD
€6-12 EUR / hour
$50-120 USD
$30-250 USD
$30-250 USD
₹12500-37500 INR
$250-750 USD
$250-750 USD
₹600-1500 INR
$30-250 AUD
€30-250 EUR
$10-30 USD
$10-30 USD
$10-30 USD
₹12500-37500 INR
₹12500-37500 INR
$30-250 USD
$250-750 NZD