Edit: I kind of got the site back in control.. If you are a WP plugins guru and have time please PM me. I like to check on some files.. Thanks
stock_post here are some of the links that will surely help you securing your wordpress sites http://www.wpbeginner.com/plugins/how-to-scan-your-wordpress-site-for-potentially-malicious-code/ http://www.wpbeginner.com/blueprint/limit-login-attempts/ http://www.wpbeginner.com/news/wordpress-sql-injection-latest-attack/ Hope these links will help you from being hacked again, also use HTTPS for wp-admin & wp-login