Hacked site cleanup
Triage, malware and backdoor removal, fixing the entry point and an incident report, with 7 days of follow-up.
- Price
- from BRL 900
- Timeline
- 24–72h
Malware removal · WordPress · Brazil
Malware, backdoor and Google spam removal, with a report of what happened and 7 days of follow-up. You know the scope and the price before you pay.
The person cleaning your site is the person doing the research: an independent researcher with CVEs reported in WordPress plugins, no outsourced support.
Quick triage
More than one? Send me the site link.
Send the link on WhatsAppHow it works
On WhatsApp, with what is going on. No form and no bot.
I check the problem, define the scope and give you the price before starting. If it's not a fit, I'll say so.
I remove the malware and backdoors, close the hole and hand over a report with 7 days of follow-up.
Services
Scope, timeline and deliverable in writing before we start. No generic package.
Triage, malware and backdoor removal, fixing the entry point and an incident report, with 7 days of follow-up.
Updates with backups, monitoring, malware scans and fast response, so the site doesn't get hacked again.
Blog
Step-by-step help to spot, understand and fix security problems on your site.
CVE-2026-103912 Reflected DOM XSS in JetFormBuilder up to 3.6.6 via query_var and data-jfb-macro. CVSS 4.7, fixed in 3.6.6.1, Wordfence advisory.
CVE-2026-62061 IDOR (CWE-639) in the ProfileGrid WordPress plugin up to 6.0.0.2. CVSS 5.3, fixed in 6.0.0.3, Patchstack advisory credited to Zenith.
Why me
Two public advisories I reported. Understanding how a plugin gets exploited helps find where the attacker got in and close the door.
JetFormBuilder · Reflected DOM XSS
ProfileGrid · IDOR (CWE-639)
Next step
Send me the link and what is happening. I confirm scope and price before starting.