Researchers Find Backdoor in School Management Plugin for WordPress

While the backdoor has since been removed, the exact origins of the compromise remain unclear, with the vendor stating that "they do not know when or how the code came into their software."