I already read some articles and answer regarding how I can clean my hacked website which normally suggested that remove WordPress and install theme & plugins manually.

I am trying to find a new way, here is the thing after get mail from cloudflare regarding malware detect in site, I installed few plugins to secure site also update wordpress with latest version.

but the malware link is still active from my domain: https://domain.com/manufacturer/h/

I did not create any post or page of ‘manufacturer’ name so don’t know how to remove it.