Restore Hacked WordPress Site

My WordPress site was recently compromised. The installation is several versions behind, the theme is outdated, and malicious files are scattered throughout the server. I need someone who can:

• Locate and remove every trace of injected code, malware, or backdoors without affecting legitimate content.
• Upgrade WordPress core, theme, and active plugins to secure, current releases.
• Repair any broken templates or functions so pages display and behave exactly as they did before the hack.
• Harden the installation—tighten file permissions, configure a reliable security plugin, and implement best-practice precautions to reduce future risk.
• Provide a short post-cleanup report summarising what was found, what was fixed, and recommended ongoing maintenance steps.

I can supply full hosting access (cPanel + phpMyAdmin) and the original theme package if needed. Please let me know your estimated timeframe and any similar restorations you have completed so I can gauge your approach and expertise.