{"id":18827813,"date":"2026-02-19T22:23:24","date_gmt":"2026-02-19T22:23:24","guid":{"rendered":"https:\/\/wordpress.org\/support\/topic\/security-concern-suspicious-files-found-inside-plugin-folder\/"},"modified":"2026-02-19T22:23:24","modified_gmt":"2026-02-19T22:23:24","slug":"security-concern-suspicious-files-found-inside-plugin-folder","status":"publish","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/security-concern-suspicious-files-found-inside-plugin-folder\/","title":{"rendered":"Security Concern \u2014 Suspicious files found inside plugin folder"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Shortly after installing this plugin, my WordPress site was compromised. During the cleanup process, suspicious hidden files were discovered inside this plugin&#8217;s images\/ folder, including hidden backdoor files that did not belong to any legitimate plugin.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The timing of the compromise directly correlated with the installation of this plugin. I am not making a definitive accusation, but the evidence was concerning enough that I removed the plugin entirely as part of my security cleanup.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I would strongly recommend other users have proper security monitoring (such as Wordfence or Sucuri) in place before installing this plugin, and to regularly scan their site for unexpected files.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I have also reported this to the WordPress security team for further investigation.<\/p>\n","protected":false},"template":"","class_list":["post-18827813","topic","type-topic","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/18827813","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/18827813\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=18827813"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}