Looking for Wordpress specialist fix critical vulnerability

We are looking for someone who is able to fix WordPress critical vulnerabilities. There is a website we aggressively customized installing WordPress. We face 2 vulnerabilities after we ran Norton for server computer. XSS has vulnerabilities. so we are looking for WordPress specialist to fix those vulnerabilities within a few hours or 1 day after we agree the job. You must have a knowledge of SFTP and work on this job as most priority job. The below is vulnerability messages. "The target system is identified with XSS which occurs when dynamically generated web pages display user input, such as login information, that is not properly validated, allowing an attacker to embed malicious scripts into the generated page which is then executed by the browser on the machine of any user that views the page with the malicious content. If successful, Cross-Site Scripting vulnerabilities can be exploited to manipulate or steal cookies, create requests which appear to come from a valid user, compromise confidential information, or execute malicious code on end user systems." Below is action required message "Perform proper user input validation and output encoding when processing the data submitted by user." We will give you more detail later. thanks