Luckily, this guy seems like he did not know how to put the malware in the correct file, but something similar might have happened to what happened a few weeks ago with the Display Widgets plugin ...

Without a doubt we should be, now more than ever, attentive to the security of our sites made with WP, since many pirates know that is the way to reach thousands of web pages, since WP is booming.

During last week, I reported on my blog, podcast and youtube channel on the topic "Display Widgets" to alert all my followers, but I think it is also up to the WP.org community to send a notice to users whenever a plugin is removed from the repository ... I am convinced that there must still be people with the malicious version of the Display Widgets installed on their web or blog, showing SPAM without having been able to realize the seriousness of the matter.

I think the community should take very important steps in this regard and not allow all people upload any plugin to the repository without it has been completely revised to make sure it is clean. It will be hard work, of course, but if we all lend our cooperation for the common good, we are sure to walk safer.

Greetings from Spain