As I mentioned in the title, I have a VPS that has been hacked. I use WHM and have about 20 sites all using Wordpress. I think I have narrowed down the problem to one particular domain that may have been vulnerable , but not 100% sure if that is the only one. I have suspended that domain and stopped the server from sending any emails temporarily until problem is fixed.
So need you to find, fix and repair.