Clear Google ‘Compromised’ WordPress Flag

My WordPress site is currently marked as “compromised” in Google Ads, blocking me from launching a new campaign. I have already updated all plugins and themes and forced HTTPS I need a security-savvy WordPress specialist to: • Pinpoint and remove any malicious code, malware, or suspicious files still hiding in the installation (core, themes, uploads, database). • Close the loophole that let the intrusion happen in the first place and harden the site (secure file permissions, firewall/Security plugin configuration, login protection, etc.). • Generate a concise cleanup log I can keep on file. • Handle or guide me through the Google Ads resubmission so the “compromised site” warning is cleared and the campaign can go live. Acceptance criteria: the site scans clean with leading tools (e.g., Google Search Console, Sucuri, Wordfence) and Google Ads approves the destination URL. Quick turnaround is important—please outline your estimated timeline and any similar recoveries you’ve handled. I made an appeal and wait for google