Hacked with webshellorb

Hello,
I am running hestia 1.2 and 4 days ago hacked with webshellorb
Is this script uses server side or WordPress?

Wordpress

Wordpress self it self is save but can’t tell that over all the plugins…

to add to that, Hestia does not ship any webshell itself, so sorry, but you need to clean up and secure your wordpress…