Compromised Wordpress Sites Serving Multiple Malwares

This report lists multiple dozen WordPress websites with paths to a '1.php?r' file (likely webshells/backdoors), representing an indicators-of-compromise collection from a mass website compromise campaign used to host or redirect to malicious content.