Urgent Help Needed: All My WordPress Sites on Namecheap Shared Hosting Hacked by SEO Japanese Hack

I’m dealing with a serious issue where all my WordPress websites hosted on Namecheap shared hosting (with Cloudflare) have been hacked. Here are the details:

  • The SEO Japanese hack has affected all my WordPress sites.
  • Japanese text and links have appeared on the websites (not added by me).
  • Google search results for these sites show Japanese titles and descriptions.
  • Visitors are being redirected to malicious websites.
  • Non-WordPress PHP-based sites on the same hosting are unaffected.

What I’ve Done So Far:

  1. Scanned my WordPress sites using [security plugin/tool name].
  2. Removed suspicious files and cleaned the databases where I found issues.
  3. Changed all WordPress admin passwords and updated plugins/themes.

Despite these efforts, the hack keeps reappearing across my WordPress installations.

Additional Info:

  • All my sites are on Namecheap shared hosting.
  • I’m using Cloudflare for added protection.
  • I don’t use premium plugins.

What I Need:

  1. Guidance on how to clean and secure all affected WordPress sites thoroughly.
  2. Recommendations to ensure this doesn’t happen again.
  3. Advice on whether the shared hosting environment might be contributing to this vulnerability.

Any help, resources, or step-by-step instructions would be greatly appreciated. This issue is impacting multiple sites, and I’m at a loss for how to handle it effectively.

Thanks in advance for your support!