To cure and mend the site to WP

There is a site on WP 5.3.2.
Has been hacked with all its embedded promotional codes, hidden links and probably anything else.
Tasks:
1) find and clean the infection
2) find and close the vulnerability
3) take the necessary measures to protect the site.

At the request cost and period, which are ready to start and do the job.