I’ve had Defender installed, but I was still hit with a wp-load.php exploit. Every minute the content of that file gets deleted. I’m almost 100% positive there is some code in my DB that affecting it but I cannot find it. Every developer, I’ve hired is unable to find it as well.
#4 on this page.
https://www.getastra.com/blog/911/wordpress-files-hacked-wp-config-php-hack/