01 Malware Removal & Security
Joshua David Plumbing
Reinfection Stopped at the Source · WooCommerce · Australia
Recurring WordPress malware traced to the trigger rebuilding the attacker’s admin
View case studyWork
Real work. Real businesses.
A selection. Every one is a real engagement — named, verified, and built to do a job: WordPress security rescues and website builds.
02 Malware Removal & Security
CGOC — 12 Websites, Watched
Group of Companies · Canada · 2-Year Engagement
WordPress security monitoring across 12 sites — two years, zero recurring issues
View case study
03 Malware Removal & Security
Borderless Migration
Escalated Beyond WordPress · WordPress · Australia
Reinfected within a week → correctly escalated to a host-level compromise
View case study
04 Malware Removal & Security
Social Media MI
Health Check That Found More · WordPress · Italy
A routine WordPress security audit that found six planted backdoors
View case study
05 Malware Removal & Security
Ting Corp & TechSavant
Security Recovery · United States
WordPress malware recovery after SiteLock failed → a year clean
View case study
06 Malware Removal & Security
Green Oasis
Security Recovery · Perth, Australia
WordPress database cleanup ended months of repeat reinfection
View case study
07 Malware Removal & Security
Apex Holding
Security & Care · Abu Dhabi
Day-one WordPress site hardening — watched live, 24/7, nothing to recover from
View case study
08 Malware Removal & Security
Oasis Ministries
Security & Care · United States
One WordPress maintenance plan across 3 sites — 18+ months, zero issues
View case study
09 Website Design & Development
Sefat Hossain
Personal Brand · WordPress Security Specialist · Next.js
Marketplace profile → independent specialist practice
Visit live site (opens in a new tab)
10 Website Design & Development
Sujon Hossain
Personal Brand · Security & Care · Laravel 11 · cPanel
Full custom CMS + premium motion on cPanel-only hosting
Visit live site (opens in a new tab)11 Website Design & Development
Le Jardin Haitian Restaurant
Restaurant · Little Haiti, Miami
No web presence → one-tap ordering funnel
Le Jardin Haitian Restaurant · Launching soon (/)
12 Website Design & Development
Queen Eyebrows Threading & Salon
Beauty & Salon · Austin, Texas
Strong reputation → booking machine
Queen Eyebrows Threading & Salon · Launching soon (/)
13 Malware Removal & Security
Solace Boats
Entry Vector Proven, Not Guessed · WooCommerce (Divi) · United States
WordPress security forensics across 146,000 log events — entry vector proven, not guessed
View case study
14 Malware Removal & Security
372 Dental
Blockchain-Hosted Reinfection Engine · WordPress · United Kingdom
WordPress malware removal against a payload that re-downloads itself from the blockchain
View case study
15 Malware Removal & Security
Asian Studies Association of Australia
Self-Healing Database Trigger Found · WooCommerce · Australia
WordPress backdoor removal that found the MySQL trigger rebuilding the admin
View case study
16 Malware Removal & Security
Epic Flooring Solutions
Four Months of Escalating Waves · Managed WordPress · Norfolk, VA
A hacked WordPress site with four months of escalating waves → verified clean
View case study
17 Malware Removal & Security
JM Painting Services
The Security Plugin Was the Malware · WordPress · United States
A fake Wordfence plugin forging its own Premium licence → verified clean
View case study
18 Malware Removal & Security
Ricardo Taylor
Casino Doorway Farm Eradicated · WooCommerce · United States
Casino spam removal across 275+ doorway posts — every indicator at zero
View case study
19 Malware Removal & Security
Coralie Saramago
Reinfection Caught Mid-Cleanup · WordPress · France
A WordPress reinfection caught inside an export labelled “clean”
View case study
20 Malware Removal & Security
Able2
Cleaned & Re-Scan Passed · WordPress · Australia
WordPress malware cleanup, verified by an independent re-scan
View case study
21 Malware Removal & Security
On Top Home Improvements
Five Backdoors, Not One · WordPress · Australia
Five C2 backdoors running WordPress credential theft — logged by scanners as one issue
View case study
22 Malware Removal & Security
Refugee Ball
Rotating Dropper Stopped · WordPress (Salient) · Australia
A WordPress backdoor plugin and its rotating dropper → cleaned and verified
View case study
23 Malware Removal & Security
Loans in Namibia
Attacker Caught Logged In · WordPress · Namibia
A rogue WordPress admin holding five live foreign-IP sessions — attacker still inside
View case study
24 Malware Removal & Security
Corporate Headshots Melbourne
Surgical Fix, No Rebuild · WordPress · Melbourne, Australia
WordPress SEO spam hidden in twelve cache rows → surgical fix, no rebuild
View case study
25 Malware Removal & Security
Heraldry Studies
Clean Theme, Infected Live Site · Hosted E-commerce
Data harvesting malware a theme reinstall would never have reached
View case study
26 Malware Removal & Security
Shahi Storefront Theme Audit
Backdoor Hosted on Someone Else's Account · Hosted E-commerce
A malicious script injection served from a stranger’s CDN bucket
View case study
27 Malware Removal & Security
Tax Store Campbelltown
Backdoor Admins Caught Early · WordPress · Australia
Two unauthorised WordPress admin accounts, both created within 48 hours
View case study
28 Malware Removal & Security
Untraceable Banknotes
Nulled Plugin Supply-Chain Risk · WooCommerce · United States
No live shell — but a nulled plugin with a remote-fetch channel in every request
View case study
29 Malware Removal & Security
Marnetic
Pirated Theme + Ad Recovery · Hosted E-commerce · United States
A pirated theme phoning home — and a flagged ad URL fixed live
View case study
30 Malware Removal & Security
TechTune Performance
Every False Positive Run Down · WordPress (Salient) · United States
A WordPress malware scan of 30,000 files — all 156 flagged patterns explained
View case study
31 Malware Removal & Security
Pylomoshop
Clean Verdict, Backed by Evidence · Hosted E-commerce
A theme security audit returning no active malware — with the next risk named
View case studyAbout this work
What these WordPress security case studies show
Every entry here is a real engagement with a named business. Where a site was infected, the write-up says what was wrong, what was removed, and what changed so it would not happen a second time.
The security work and the build work sit in one list on purpose. They are the same skill from two ends: one is repairing a site somebody else left open, the other is not leaving it open in the first place.
Worried about your site?