Description
Project Overview I own a WordPress website hosted on Bluehost for my HVAC company, Turbo Home Services LLC. I suspect that a former marketing contractor may still have access to the website. I have been unable to regain administrator access through WordPress, and some Bluehost website management functions are not working correctly. Before making any website changes or redesigns, I need an experienced WordPress security specialist to audit, secure, and restore full ownership of my website. This is **not** a website redesign project. My priority is to secure the existing website and ensure I have complete control. Scope of Work Please complete the following: Access & Ownership * Verify I have full ownership of the website, hosting account, and WordPress installation. * Create a new WordPress Administrator account under my email. * Verify that I can successfully log in. Security Audit * Review all administrator accounts. * Remove any unauthorized users or accounts. * Audit user roles and permissions. * Check for hidden administrator accounts. Malware & Backdoor Scan * Scan the website for malware. * Check for backdoors. * Inspect: * wp-config.php * functions.php * wp-content * plugins * themes * uploads folder * must-use (MU) plugins * Review scheduled cron jobs for suspicious activity. * Remove any malicious code found. Website Security * Change all administrator passwords. * Rotate WordPress security salts. * Secure file permissions. * Disable unnecessary access points if appr