Fixing wordpress redirect hack on our web pages

Our company's web pages www.talentor.fi run on WordPress 4.7.25. We are a small company so there has not been updates on plugins for several years. We have recently noticed that the web pages had been hacked so that google search results show various links to scam-online webstore called www.shopgoods666.com

Please see attached screenshots


The project would consists of:
- removing the hacked re-directions from the code
- updating Wordpress and all the plugins to the latest version
- performing other necessary tasks to protect from future similar hacks