Detect
- Scan files with the built‑in malware scanner.
- Check modified dates and suspicious plugins/themes.
Clean
- Replace core files from official sources.
- Remove unknown plugins/themes.
- Change all passwords.
Harden
- Enable WAF/Firewall.
- Keep everything updated.
- Use least‑privilege access.