WordPress Cleanup, Malware Check & Security Audit

Job ID: 40500715

Budget: $30 – $250 USD

WordPress SEO Spam Cleanup & Security Audit
Project Overview

We are looking for an experienced WordPress security specialist to investigate and fully resolve an SEO spam/hacked indexing issue on our WordPress website.

Background

Our website is a healthcare-related WordPress site. Recently, Google Search Console revealed over 300 indexed URLs under:

/listing/...

These URLs contain unrelated product listings (e.g. clothing, mugs, collectibles, etc.) that have nothing to do with our website.

Examples:

https://www.domain.com/listing/in-linea-berlin-seidenbluse-gr-40
https://www.domain.com/listing/starbucks-2018-turks-and-caicos...

Currently, these URLs appear to return a 404 page, but Google still has many of them indexed.

What We Have Checked
Website appears normal to visitors
No spam content found in WordPress Posts
No spam content found in WordPress Pages
wp-config.php reviewed
mu-plugins reviewed
No obvious malicious files found in the WordPress root directory
Google Search Console shows approximately 300 indexed spam URLs
Spam URLs are under /listing/
Google previously indexed these pages successfully
What We Need

We need a full investigation and cleanup including:

Identify how the /listing/ URLs were created
Determine whether the site is currently compromised
Check for:
SEO spam
cloaking
Googlebot-only redirects
malicious plugins
malicious theme code
database injections
hidden users or backdoors
Verify that all spam URLs are removed from the website and database
Ensure Googlebot sees the same content as normal visitors
Review:
.htaccess
theme files
plugins
database
WordPress core files
Provide recommendations to prevent reinfection
Assist with Search Console cleanup and de-indexing
Deliverables
Written report of findings
List of infected files/tables (if any)
Cleanup completed
Confirmation that no SEO spam remains
Recommendations for ongoing security hardening
Requirements
Proven WordPress security experience
Experience removing SEO spam and cloaking hacks
Experience with Wordfence, malware analysis, and Google Search Console
Ability to work on a live production WordPress website

Please include examples of similar WordPress malware/SEO spam cleanup projects you have completed.