Does this mean that there is no practical measures to ensure that your wordpress website is fully / absolutely secure 100% ?
I have also been battling with this same issue for weeks, I have over 21 clients websites infected. And it’s really been a lot of frustration and have made me loose they trust.
The malware/hacker keeps creating all kind of files, and even new themes and plugins, and also redirects my websites to a strange URLs.
I keeps changing them back, deleting the generated files and codes, have changed my passwords several times, all plugins/theme are up to date.
Also most unfortunate, I don’t have a safe backup to fall back on.
Please I will appreciate any help?