WooCommerce Security Audit & Hardening

Our live WooCommerce site sits on a Plesk server behind Cloudflare and has started behaving oddly: some sessions append the query string “?srsltid=” and a few browsers have begun flashing security warnings. I have run quick checks with Sucuri, reviewed Cloudflare logs, and tested via cURL, yet no obvious infection surfaced, so I need a deeper look. The single most important task is a full malware and security audit. I want every corner of the WordPress core, theme, plugins and server environment inspected for hidden scripts, backdoors, rogue cron jobs, or clandestine redirects. There have been no recent code, theme, or content changes on my side, so anything you uncover is almost certainly the root of this new behaviour. You are free to use whichever tool-set you trust—Wordfence, Sucuri’s CLI scanner, wp-cli checks, manual grep searches, or any other professional workflow—as long as the results are thorough and clearly documented. When the audit is complete I expect: • a concise report outlining what you inspected, what you found (even if that is “clean”), and the evidence behind each conclusion • immediate removal of any malicious files, database entries, or redirect rules you discover • confirmation that the “?srsltid=” parameter and any other unwanted redirects no longer appear under load testing • hardening measures applied and listed (permissions, wp-config tweaks, firewall rules, Cloudflare settings you recommend, etc.) • final validation that the site loads cleanly in major browsers with no warnings I will give you SSH and WordPress admin access as needed and can schedule a maintenance window if downtime is required. Please outline your estimated turnaround time and any precautions you want me to take before you begin.

Project ID: 40233544