I use OceanWP theme, but i noticed it started happening even though i deactivated it, and later on deleted it. My security scan says there was a file which was not connected to theme, plugin or anything related to wordpress. I deleted it and changed passwords on cpanel and wordpress. Idk if maybe they did something.
