get 404 when accessing wp-admin/plugin-install.php

I would rename the plugins page (via FTP or your hosting file manager) to disable all plugins and then try to access. You could also rename any non-‘twenty’ theme folders to disable those, so it would default to one of the ‘twenty’ themes.

Then look at other files in the site root, sorting by date (newest first) to see if there are some rouge files in there. Also look for same in the wp-* folders. And check your htaccess file.