I have used this plugin for a long time. Recently I installed the Wordfence Security plugin also. However the scans indicate that there are several malicious urls in the database backups of WP DBmanager. I definitely did not put them on my site, and they only show up in the db backups. So I suspect that those malicious files somehow find their way into the db backups via some vulnerability. If I ever had to reinstall the database, I imagine I would have some nasty links on my site. Does anyone have any experience with this issue?