WORDPRESS PLUGIN HARBORED SECRET BACKDOOR FOR 5 YEARS

The Quick Page/Post Redirect plugin, installed on over 70,000 WordPress sites, contained a hidden backdoor that remained dormant for five years. The vulnerability allows attackers to inject arbitrary code directly into affected websites.