Two mu-Plugins That Rebuilt Each Other, and the Application Passwords That Let the Attacker Back In
Two WordPress backdoors that rebuilt each other: a self-repairing mu-plugin pair, a wp-config recovery block, copies in wp_options and Application Passwords.
Read Article