I think I may have fixed it. https://www.flexxxstrops.com
When I view it while logged into wordpress, it does not show me the hacked link (it did not previously either). Looking at it from my mobile no longer shows the obscene words that were a link.
It is, and I am not sure what that means. I haven’t made changes to anything since last October, and then just what I did today. The scan did tell me critical to update, so I updated. Could that have been the problem?