A wordpress plugin has been hacked since 2020, allowing malicious code to be injected silently. The scope of the issue is unclear, with reports of multiple wordpress plugins being affected, potentially including a redirect plugin and a file manager plugin. The hacking may be part of a broader issue, with other types of software and websites also being targeted for malicious purposes.