WordPress Security Cleanup & SEO
Budget: $250 – $750 NZD
I’m facing an active breach on my WordPress site: new user accounts keep appearing even though registration is disabled, and an admin password was changed without my consent. This points to malicious code hiding in the Plugins, Themes, and Database rather than a core-level flaw. I haven’t added any new extensions or themes recently, and the only backups on hand are old, so we’ll need to assess their reliability.
Here’s what I need:
• Full forensic scan of plugin folders, theme files, and database tables, with removal of every malicious script or rogue user.
• Hardening of wp-config, file permissions, .htaccess, salts, and all passwords after the cleanup.
• Clean reinstall or safe-content migration if that proves faster and more secure than piecemeal fixes.
• Concise security report outlining vulnerabilities found, actions taken, and recommendations to prevent a repeat.
• Follow-up on-page SEO optimisation—refresh meta titles and descriptions, resolve crawl errors, improve Core Web Vitals, and verify overall search health post-hack.
Please outline your approach, the tools you’ll use (e.g., WP-CLI, Sucuri, Search Console, Screaming Frog), and a realistic timeline. The site is live, so quick, decisive action is crucial.
Here’s what I need:
• Full forensic scan of plugin folders, theme files, and database tables, with removal of every malicious script or rogue user.
• Hardening of wp-config, file permissions, .htaccess, salts, and all passwords after the cleanup.
• Clean reinstall or safe-content migration if that proves faster and more secure than piecemeal fixes.
• Concise security report outlining vulnerabilities found, actions taken, and recommendations to prevent a repeat.
• Follow-up on-page SEO optimisation—refresh meta titles and descriptions, resolve crawl errors, improve Core Web Vitals, and verify overall search health post-hack.
Please outline your approach, the tools you’ll use (e.g., WP-CLI, Sucuri, Search Console, Screaming Frog), and a realistic timeline. The site is live, so quick, decisive action is crucial.