Hackers are infecting WordPress sites via a defunct plug-in https://nakedsecurity.sophos.com/2019/09/26/hackers-are-infecting-wordpress-sites-via-a-defunct-plug-in/