Web Shell Backdoor Used in WordPress Plugin Supply Chain Attack

A hidden plugin installed by the attacker acts as a web shell, allowing remote command execution on the compromised server without authentication.