Wordpress Site Malicious Attempt to Access Your Hosting Account is Detected

I am in need of an experienced Wordpress developer who can help me with a security issue on my site. A malicious attempt has been made to access my hosting account and I suspect it may be due to a vulnerability in a plugin or theme. I have installed security plugins, but I need someone to thoroughly investigate and ensure my site is fully secure. Additionally, I have a recent backup of my site, but I would like the developer to create a backup before making any changes. The ideal candidate should have: - Experience with Wordpress security and identifying vulnerabilities - Knowledge of popular security plugins - Ability to create backups and restore if necessary - Strong communication skills to keep me updated on progress and any necessary changes. Dear Hosting Account ..... Owner, This is an automated alert to inform you that we have detected a malicious attempt to access your account via http or ftp on our server '[login to view URL]'. Our security systems have blocked the upload of malicious file to the server and put it to the quarantine. Your website is safe now, but it is important you undertake the following precautions. 1. Immediately scan your PC for viruses and malware. We recommend the anti-virus programs which free editions are available for most operating systems for this purpose. 2. Make sure that you use strong, hard-to-guess passwords on your account and applications. Do not use the same password for different applications. To remember more difficult passwords, we recommend you use the password managers such as LastPass or RoboForm. 3. Update all third party scripts to the latest versions (e.g. Joomla, WordPress, Magentoo or any other CMS). Remove every script, gadget, feature, function, and code snippet which has poor security vulnerability report. 4. Use .htaccess or cPanel > Deny IP to block the hacker's HTTP access to your site. If you identified the hacker's IP address, one site where you can look it up to get more information about this IP is [login to view URL] . 5. Change your cPanel/ftp passwords. We have put the following content into quarantine as we believe it contains viruses or other malicious code. If you feel this has been in error and your file is false-positive (innocent), please submit a ticket to us at [login to view URL] or contact the Live Help at [login to view URL] and we will be happy to assist: 'ClamAV detected virus = [{HEX}[login to view URL]]': /home/hornyueo/public_html/wp-includes/blocks/nextpage/.[login to view URL] -- Regards, NameCheap Hosting Team