Backdoored WordPress Plugin Abuses Remote Update Checker for Silent Code Delivery

A stealthy supply-chain compromise was discovered in the Quick Page/Post Redirect Plugin (v5.2.3): the plugin contained a custom updater pointing to anadnet.com that allowed the attacker to push backdoored updates (RCE) and insert hidden content for logged-out visitors (parasite SEO). The malicious code matched the official version number, evaded scanners, persisted across ~70,000 active installations for over five years, and site owners are advised to verify plugin checksums via WP-CLI and uninstall the compromised plugin.