Yes the malware goes away only when i change the theme, not even when i disable woodmart core or any other plugin. I downloaded a new theme from envato and reinstalled it but the problem persists. I think malware have lingered from the few weeks ago when the vulnerable version of woodmart core was active. Any suggestions on cleanup? I have reinstalled wordpress as well.