20th Dec 2021

Site was altered using certain scripts

we saved all external links on the server(jquery bootstrap on the server ) removed all the external
links
we were checking through logs, inspect element
we had latest backup of code and the database
changed our administrator passwords
removed any weak plugins
test server has been made available
comments have been switched off from the wordpress settings globally
since the table in the wordpress has default name we can rename it to some other prefix
we have checked the log, inspect elements, database

https://www.linkedin.com/learning/wordpress-building-a-secure-site
https://wpsec.com/account/status.php
https://wordpress.org/support/topic/siteurl-hacked-to-redirect-to-another-site/
https://wordpress.org/support/article/faq-my-site-was-hacked/