Reset FTP passwords
Reset all admin passwords
Reset database password
Reset WordPress SALTs
Check to see if any new users have been added
Replace all WordPress core files outside of Wp-content, except for WP-config.php. Visually check over this file, if you are unsure then copy the database specs to the wp-config-sample.php and rename it.
Manually go through all of the folders within the uploads folder.
Manually review all files in the active theme folder.
Delete the cache folder it is there. Delete unneeded themes. Remove unneeded or unused plugins. For any remaining plugins delete the folder and redownload them from the repository.
Run WordFence scan.