rening1964

I find out that they use /wp-admin/admin-ajax.php to place the malware on my websites. This is the problem. The theme is newspaper.

They use /wp-admin/admin-ajax.php to place the malware

There still clean. I think it is kind of SQL injection.