Your site is getting hacked — and the patches don't hold.
Cleaned up, then reinfected. The vulnerabilities live in code nobody owns anymore — old PHP, abandoned plugins, custom theme work no one has time to audit. Modernization closes the doors security tools can't keep shut on a legacy stack.