Hackers Deploy Stealth Backdoor in WordPress Mu-Plugins to Maintain Admin Access
July 24, 2025
1 min read
●
The Hacker News

Cybersecurity researchers have uncovered a new stealthy backdoor concealed within the "mu- plugins" directory in WordPress sites. Must-use plugins (aka mu- plugins) are special plugins that are automatically activated on all WordPress sites in the installation.