A popular wordpress redirect plugin has been found to contain a backdoor that has been present for years. The backdoor is reported to have been used to inject malicious code into websites, with some outlets suggesting that multiple wordpress plugins may have been affected. The timeline of the hack is unclear, with reports varying from the backdoor being dormant for years to it being active for around 8 months.