Remove malware and clean up this wordpress, wordfence enabled religious site -- 2

Job ID: 35986084

Budget: £20 – £250 GBP

This website is for a religious charity that works to prevent wares and encourage peace, through trust in god.

There is malware that has imbedded code about escort services. The malware is not presenting to people but is hidden in the code, we need it removed, the site vulnerability identified and resolved, and a full check to ensure it's safe and a handover explanation as to what the problem is/was.
WordFence has identified the vulnerability.

The winning bid will receive
WordPress login
FTP access
eXtendCP login (not unlike cPanel login includes MySQL, PHPMyAdmin and error logs)

The site is hosted on a shared server in the UK.

I get so fed up with freelancer.com allowing auto bidding from freelancers who copy and paste they have read the project but clearly have not.. so please be assured to be considered you need to start with the keyword "football".
I will delete any bids that don't start with the keyword "football"
Related categories: PHP Web Security WordPress MySQL HTML