
Completed
Posted
Paid on delivery
MalCare’s scan has flagged three malicious files and three vulnerabilities on my WordPress install, and I have also discovered an unauthorized Google-Site-Verification meta tag injected into the header. I need the site fully cleaned, the rogue tag removed, and the root of the compromise patched so it does not re-occur. Scope of work • Locate and delete every malicious file MalCare detected, then run a follow-up scan to prove the site is clean. • Patch or safely neutralize the three reported vulnerabilities without disabling any of my existing plugins—I want to keep them all intact. • Strip out the illegitimate Google verification token and make sure no one except me can add new Search Console properties in the future. • Add and configure enhanced firewall protection (Wordfence, Cloudflare WAF, or a comparable solution) and verify it is actively blocking typical attack vectors. • Tighten file permissions, secure wp-config, and close any additional obvious gaps you spot during the cleanup. Assets & constraints I have a recent full backup ready if you need to roll anything back. Please work on a staging copy first if possible, then migrate the fixes to production once everything is verified. Acceptance criteria 1. MalCare and a second scanner both show zero malware. 2. The unwanted meta tag is gone from all pages. 3. Firewall rules are live and logging. 4. Admin access to Google Search Console is restricted to my account only. If you’ve handled similar WordPress hardening projects, let me know your plan and an estimated timeline—speed matters, but I won’t sacrifice thoroughness for haste.
Project ID: 40383044
129 proposals
Remote project
Active 3 days ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs

Hi, I've dealt with exactly this kind of compromise before—malicious file injections paired with rogue Google Site Verification tags are a classic sign of an attacker trying to claim your domain in Search Console for SEO spam. My approach: I'll start on your staging copy, remove all flagged files and run both MalCare and Wordfence scans to confirm a clean slate, then trace how the attacker got in—typically an outdated plugin vulnerability or weak file permissions—and patch it without disabling any of your existing plugins. I'll strip the injected meta tag, lock down wp-config, harden file permissions, and configure Cloudflare WAF with rules tailored to WordPress attack vectors. I can start immediately and have handled similar cleanups dozens of times.
$30 USD in 1 day
0.0
0.0
129 freelancers are bidding on average $117 USD for this job

Hi, I'm a Senior Developer. Here is what I will do: 1. I will remove all malicious files, patch the three vulnerabilities and strip the rogue Google verification tag completely. 2. Harden your WordPress install by securing wp-config, tightening file permissions and closing all exposed gaps. 3. Configure Wordfence or Cloudflare WAF with active firewall rules and verify zero malware via two independent scanners. 4. Deliver a clean staging verified fix migrated to production with full security confirmation. With my expertise of 15+ years, I can do the job fulfilling your needs.
$250 USD in 7 days
9.6
9.6

Hello, I hope you're doing well. I can assist you in thoroughly cleaning and securing your WordPress site. I'll ensure the removal of all malicious files, patch vulnerabilities, and secure your site to prevent future issues. Here's how I'll approach your project: 1. Conduct a comprehensive scan to remove malicious files and confirm a clean site. 2. Patch vulnerabilities while keeping all your current plugins intact. 3. Remove the unauthorized Google-Site-Verification tag and restrict future access to Google Search Console. 4. Implement and configure robust firewall protection to block potential threats. 5. Enhance security by tightening file permissions and securing wp-config. I'm committed to delivering a secure and fully functional site. Could you share any specific timeline you have in mind for this project? Are there any particular features or plugins you prioritize keeping intact? Would you like to review the staging site before going live? Looking forward to ensuring your site is secure and efficient. Best, Azeem Amin
$250 USD in 7 days
9.1
9.1

Dear , I noticed the critical security issues on your WordPress site and understand the urgency of cleaning up malware and fortifying its defenses. With over 450 successful projects and a 4.9★ rating, I specialize in precisely this type of challenge. My approach involves meticulous file scanning, targeted vulnerability patching, and strategic firewall implementation to safeguard your site. I have successfully removed malware, eliminated unauthorized tags, and enhanced security for numerous WordPress sites, resulting in significant traffic increases post-cleanup. With a data-driven methodology and transparent reporting, I ensure thorough and lasting results. Your site's security is paramount, and I am committed to delivering a robust solution tailored to your needs. Let's discuss your goals and devise a comprehensive plan to secure your WordPress site effectively. Best regards,
$180 USD in 3 days
8.4
8.4

Hi, I will do it now. I will clean your WordPress site by locating and removing all malicious files, patching vulnerabilities without affecting existing plugins, removing unauthorized meta tags, and implementing enhanced firewall protection. I will also tighten file permissions and close any security gaps. Let's discuss further to ensure a secure and clean website. Regards, Sai Bhaskar
$75 USD in 1 day
7.8
7.8

Hi, I’ve reviewed your goal of fully cleaning and securing your WordPress site after malware and unauthorized access issues. I can handle this thoroughly without disrupting your existing setup. • Remove all malicious files and verify with multiple scans • Patch vulnerabilities while keeping all plugins intact • Remove rogue meta tag and secure Search Console access I focus on deep security hardening, firewall setup, and long-term protection. Would you like this done on staging first before pushing live? I’d be glad to discuss your project further and get started right away, ensuring maximum value.
$100 USD in 7 days
7.6
7.6

Hello, This is a targeted infection (malicious files + injected verification tag), and I’ll handle a full cleanup and hardening so it doesn’t return. Cleanup & Verification Locate and remove all malicious files flagged by MalCare Deep scan (files + database) to catch hidden backdoors Re-scan with MalCare + secondary tool to confirm zero malware Vulnerability Fix Patch the 3 vulnerabilities without breaking plugins Update/secure configurations while keeping functionality intact Google Verification Fix Remove unauthorized meta tag from all templates/db Audit access and lock down so only you can verify properties Security Hardening Configure Wordfence or Cloudflare WAF (live + logging) Secure wp-config, file permissions, disable risky entry points Block common attack vectors (XML-RPC abuse, brute force, etc.) Workflow Work on staging first (using your backup if needed) Test fully, then push fixes to production safely Result Clean site (0 malware on both scanners) No rogue meta tags Active firewall protection Locked-down environment Timeline: 24–48 hours depending on severity I’ve handled similar reinfection cases and ensure both cleanup and root cause are fully addressed. Ready to start. Ali Asif
$50 USD in 1 day
7.6
7.6

Hi, We’ve successfully cleaned and secured multiple WordPress sites from malware, including one that had been compromised for over a year. Our approach goes beyond just removing malicious files; we also identify and fix the underlying vulnerabilities to ensure long-term security. For your project, we’ll: * Remove all detected malware and run multiple scans to confirm the site is clean. * Patch vulnerabilities without affecting existing plugins. * Remove the rogue Google verification tag and restrict access to Search Console. * Implement a robust firewall and tighten overall security. We also provide ongoing support to address any new issues that may arise after cleanup. Let’s schedule a quick call to discuss your project in more detail. I usually respond within 10 minutes. Best regards, Adil
$133.24 USD in 7 days
7.3
7.3

With over 8 years of experience specifically dealing with WordPress, WooCommerce, and Magento, I'm more than equipped to handle your project. Malware removal, hardening and optimization are not just routine tasks to me; they're my forte. Speed and thoroughness are paramount in this sort of endeavor and I am proud to say that I am capable of achieving both simultaneously. I'll not only wipe out all the malicious files flagged by MalCare, but also leave no stone unturned to ensure comprehensive site security. Furthermore, having worked on numerous projects involving third-party integrations and plugin customization, I am confident that I can patch up or neutralize the vulnerabilities without disrupting any of your precious plugins. The end goal is guaranteed peace of mind for you and your WordPress install. In addition to fixing the immediate issues raised by MalCare scan, I will take extra care in implementing preventative measures like enhancing your firewall protection with Wordfence or Cloudflare WAF, plugging any obvious gaps I may spot during cleanup, and improving file permissions and wp-config security.
$80 USD in 1 day
6.8
6.8

Hi, I can fully clean and secure your WordPress site to remove malware and prevent future breaches. I will scan and remove all malicious files, patch vulnerabilities without breaking plugins, then eliminate the rogue meta tag and secure Search Console access, and finally configure firewall, permissions, and hardening. I’ve resolved similar infections with complete cleanup and zero reinfection. Can you provide staging or should I set one up before applying fixes? Best regards, Joya.
$110 USD in 7 days
7.0
7.0

Hello I will expertly clean the 3 malicious files MalCare detected. Then, I'll conduct a comprehensive scan for any hidden malware. Finally, I'll implement robust security hardening, ensuring your WordPress site is clean, secure, and protected against future threats. Giáp Văn Hưng
$94 USD in 7 days
6.7
6.7

Hello, I can secure and fully clean your WordPress site by removing all malware, fixing vulnerabilities, and preventing future attacks without disrupting your existing plugins or functionality. I’ll carefully locate and delete all malicious files flagged by MalCare, run verification scans, and ensure your site is completely clean and stable. I’ll also remove the unauthorized Google verification tag, patch the vulnerabilities safely, and implement strong security measures including firewall setup (Wordfence/Cloudflare), hardened file permissions, and wp-config protection. I’ll work on staging first (if available), then push verified fixes to production and provide a clear summary with prevention steps so your site stays secure long-term. Here is my portfolio: https://www.freelancer.in/u/sainiji92 I am available to proceed and ensure the required work is completed within the agreed timeline. I look forward to the opportunity to work with you on this project. Kind Regards, Pankaj
$150 USD in 7 days
6.8
6.8

⭐⭐⭐⭐⭐ Hi According to the job details that you need WordPress Malware Cleanup & Hardening I have some questions regarding your project details. let me know when you're available to chat so we can discuss PORTFOLIO LINK:- https://www.freelancer.com/u/suritaverma Thanks & Regards Surita (Freelancer) P.S. - If you'd like me to send over some of my work please don't hesitate to let me know!
$100 USD in 1 day
6.6
6.6

With my extensive background in server administration, web security, and cloud computing platforms like AWS, GCP, and Azure, I am confident that I can skillfully resolve your WordPress malware and hardening issues. Over the years, I have demonstrated proficiency in handling similar projects, and my core focus has always been on ensuring thoroughness without compromising on timeliness.
$140 USD in 1 day
6.9
6.9

Hello, I'm Asma, Web Developer and Graphic Designer with 10 years of experience working with clients and agencies from around the world. Creative problem solver with a passion for creating visually appealing and user-friendly digital solutions. I love building luxurious brands and designing captivating visual identities. I've worked with clients in lifestyle, property, fashion, hospitality, and luxury sectors. 24/7 Support & Faster Response . #WEBSITE DESIGNING / DEVELOPMENT #WORDPRESS/HTML/JS/CSS/PHP/LARAVEL/SHOPIFY #GRAPHIC DESIGNING #UX/UI #FIGMA #SQUARESPACE #SOCIAL MEDIA MARKETING #PHOTOSHOP/ILLUSTRATOR #GOOGLE ADS #JEWELERY DESIGNER #LOGO DESIGN #BANNER DESIGN #BUSINESS CARD #STATIONARY DESIGN #CD COVER #POWERPOINT PRESENTATION #BOOK COVER #LETTERHEAD DESIGN #3D LOGO #WORDPRESS #WEBSITE PAGE SPEED UP UPTO 95-99 #WEBSITE SEO #FIGMA TO WORDPRESS/HTML/JS/CSS/PHP/LARAVEL #PSD TO WORDPRESS/HTML/JS/CSS/PHP/LARAVEL ...... ETC :)
$200 USD in 3 days
6.6
6.6

As an experienced WordPress developer with a special focus on site security and management, I believe I’m well-suited for your WordPress Malware Cleanup & Hardening project. I understand the importance of not just cleaning up and patching vulnerabilities, but also ensuring that such compromises don't re-occur. My proficiency in Linux, PHP, and Web Security will enable me to complete the required tasks effectively. Having successfully delivered numerous WordPress hardening projects in the past, I can guarantee you a thorough and speedy job. Emphasizing both speed and thoroughness, my plan would be to first work on a staging copy using the most reliable malware scanning tools like MalCare followed by another scanner to ensure a 100% infection-free website. In sum, if you're looking for a meticulous professional who’ll prioritize your website's security without compromising its functionality or design aesthetic - I assure you that my services will meet and exceed your expectations.
$100 USD in 1 day
6.6
6.6

Hi! My name is Marjan and I'm here to offer you my services as a skilled applicant with over a decade of experience working on Freelancer.com. l believe I am the best fit candidate for this project due to my extensive experience; I would like to have a discussion to get to know that we both are on the same page. Once the scope will be locked, I will start working on it right away.
$140 USD in 7 days
6.6
6.6

Hello Sir, I have 6 years of experience in WordPress security and can fully clean your site, remove all malicious files, eliminate the unauthorized Google verification tag, and patch vulnerabilities without disabling your plugins. I will configure firewall protection, secure file permissions, and ensure scanners report zero malware before final delivery. I look forward to bringing your vision to life! Best regards, Shafiq Please come to my chat. I am ready to start right now.
$50 USD in 1 day
6.5
6.5

I can fully clean and harden your WordPress site by removing all MalCare-flagged malware, eliminating the injected Google verification tag, and fixing the underlying entry points so it doesn’t happen again. I’ll patch vulnerabilities without disabling your existing plugins, implement firewall/WAF protection (Wordfence/Cloudflare), and secure wp-config and file permissions with proper hardening standards. Best Regards, Muhammad
$90 USD in 1 day
6.3
6.3

Hello, I can clean and fully secure your WordPress site and make sure the issue does not return. I have 11+ years of experience handling malware removal and security hardening. My approach: • Manually remove all malicious files flagged by MalCare and run a second scan (Wordfence/Sucuri) to confirm a clean state • Patch the 3 vulnerabilities safely without breaking your existing plugins • Remove the unauthorized Google verification meta tag and secure access so only you can manage Search Console • Set up and configure a firewall (Wordfence or Cloudflare WAF) with active protection and logging • Harden the site (file permissions, secure wp-config, disable risky endpoints, cron cleanup) I can work on staging first, then push verified fixes to production. Timeline: 12–24 hours depending on infection depth You’ll receive a clear report covering what was found, fixed, and preventive measures. Ready to start immediately once access is shared. Best regards, Manoj Kumar
$40 USD in 2 days
6.1
6.1

Hello, I have carefully reviewed your MalCare report and the security breach details. Dealing with unauthorized Google-Site-Verification tags is a serious indicator of an SEO spam injection or a backdoor that needs immediate, professional remediation. With a 100% success rate and over 200 projects completed on various platforms, I specialize in WordPress hardening and deep-system cleaning. My Step-by-Step Action Plan: Audit & Isolation: I will start by creating a staging environment using your backup. I'll verify the MalCare flags and perform a deeper manual audit of the wp-content and uploads directories for obfuscated code. Malware Elimination: I will remove the flagged files and the rogue meta tag. I’ll also check the database (wp_options and wp_users) for unauthorized admin accounts or injected scripts. Vulnerability Patching: Instead of disabling plugins, I will apply manual patches or update configurations to neutralize the three specific vulnerabilities while maintaining site functionality. Why Choose Me: On-time (95%) & On-budget (100%) delivery. 5-Star Rated Developer with a focus on long-term security, not just "quick fixes." 47+ successful projects specifically on Freelancer.com. I can begin immediately and expect to have the staging cleanup completed within 24 hours. Let’s secure your site once and for all.
$90 USD in 7 days
6.2
6.2

Fort Collins, United States
Payment method verified
Member since Sep 5, 2004
$10-30 USD
$30-250 USD
$10-30 USD
$30-250 USD
$10-30 USD
€12-18 EUR / hour
$15-25 USD / hour
₹75000-150000 INR
$30-250 USD
$30-250 USD
₹750-1250 INR / hour
$30-250 USD
₹1500-12500 INR
$30-250 USD
₹12500-37500 INR
$25-50 USD / hour
$30-50 USD / hour
min $50 USD / hour
₹1500-12500 INR
$30-250 USD
$750-1500 USD
$30-250 USD
$10-30 USD
$25-50 USD / hour
₹600-1500 INR