Check the Wordpress site for viruses, to close the vulnerability

There is a suspicion of hacking attempts of the website (maybe the competitors want to remove), you need to check the site for malicious code in database and code. To audit weak points and close them