Malware laden Word Press website or just weaknesses?

Re: https://urlquery.net/report/e851665f-da1c-4d18-8c7a-533b10d8f789
Outdated CMS Software and Outdated PHP version: https://sitecheck.sucuri.net/results/sircomed.com
F-grade scan result: https://observatory.mozilla.org/analyze/sircomed.com
29 recommendations to further improve site and site-security:
https://webhint.io/scanner/fc29ca80-1aa9-4f4b-9f7a-2e98245b94b7
Code of website file scanned: https://aw-snap.info/file-viewer/?protocol=secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=c1t9Xl1teyMuXl1t~enc
XSS-DOM issues: Results from scanning URL: -https://sircomed.com/wp-content/uploads/fusion-scripts/3f15e3cd81e21b86a6bb03513e89c6e7.js?timestamp=1555692331
Number of sources found: 18
Number of sinks found: 2

Results from scanning URL: -https://sircomed.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.9.2
Number of sources found: 41
Number of sinks found: 17

Results from scanning URL: -https://sircomed.com/wp-content/uploads/fusion-scripts/3f15e3cd81e21b86a6bb03513e89c6e7.js?timestamp=1555692331
Number of sources found: 497
Number of sinks found: 75

polonus (volunteer 3rd party cold reconnaissance website security analyst and website error-hunter)