Hacked through Revo Slider – Adding over 1000 posts per day

Hi everyone,

I have a client website that has been hacked through revo slider. The plugin was up to date (the one from Dec 2014), but this is a new venerability it seems.

The problem is that a bot has added over 50,000 posts in the last 3-4 days. I’ve taken the following steps but has not helped

1. Removed revo slider
2. Did a clean WP install from the FTP, the only folders that were copied from the old one were the theme files and the images.

– I have a feeling that the exploit is embedded in the theme files, but the theme has been heavily modified so re-doing that from scratch is not an option (at the moment).

Was wondering if anyone here has had the same issue, I’ve been scouring the web for something similar, but havent found anything yet. Let me know if you have any questions, and I will try to answer them to the best of my abilities (or ask our web dev person).

Thanks for reading!