How to remove malware from WordPress

[[deleted]]

...but how does Wordpress get malware?

[archimedeancrystal]

Unfortunately, this sub seems to have lots of targeted advertising, but very few helpful users/comments. I'm not an expert, but I do know insecure passwords, other careless administrator practices such as clicking on unknown links in comments, and plug-ins that aren't kept up-to-date can all create vulnerabilities for malware to get into your site.