Hackers have been found to hide backdoors in trusted wordpress plugins, with one instance reportedly going undetected for 8 months before malware was activated. However, it is unclear if this specific incident is related to other reported vulnerabilities, such as a joomla flaw allowing php code execution. The discovery of these backdoors has raised concerns about website security, prompting warnings and advice on how to protect against such threats.