Credit Card Skimmer and Backdoor Found Lurking on WordPress E-commerce Site

The hidden PHP file manager backdoor provided attackers with extensive control over the compromised website. It had features such as cookie-based authentication, complete filesystem access, directory traversal, and timestamp manipulation.