Old hacked CMS on Joomla and WordPress. How to solve the problem?

Question

PHP

Good day!
Actually, there are many landings, regular sites, a couple of stores, and they are all on old outdated CMS (JOOMLA WORDPRESS). Almost everyone was hacked and no one really treated. I will stay 1 on 1 with all this junk. What are the solutions?
ps In addition to the CMS, a million and 1 third-party modules are stuck there. Almost every site.

Answer 1

The best decision.

Answer 2

Update, clean up and secure;
Or
clean and secure

Answer 3

What a budget !
It is clear that not everyone wants to deal with such garbage))

Answer 4

What are the solutions?

Prepare money and contact specialists. It's clear that you can't handle it. After all, they don’t even have the skills to use Google Yandex, to say nothing about such things as security and site building.

Answer 5

Update to the latest version of CMS and plugins. If some plugins are not supported by the latest version of the CMS, then either modify or abandon them

Answer 6

1. Clean up viruses: clamscan + read maillog + trace mail calls.
2. Install and configure suhosin if possible
3. All sites that can be used in readonly mode for fs.
4. Depending on cms, disable execute in directories where it is not supposed to.
5. If you have experience, set up naxsi to filter SQL injections
. 6. As a result, have a "clean" backup so that everything can be rolled back to a virus-free state and monitor activity.
I could even take it on for cheap, because half the battle is automated. In general, this is a task for automating the routine - this issue must be resolved once and for all, because there will be new sites on new cms with new holes and they will also become old over time