To remove the malicious code on the WP site

the virus appeared on the website. Need to find a vulnerability, through which they were introduced, and fix it