A Backdoored WordPress Plugin and 3 Additional Vulnerabilities