The Premium SEO WordPress plugin contains a malicious backdoor that grants unauthenticated attackers full control over the affected website.

This vulnerability is classified as hidden functionality (CWE-912) due to the presence of an intentional, malicious backdoor. It allows an unauthenticated attacker to gain administrative access and execute arbitrary code on the server.

This represents a total compromise of the affected WordPress site. An attacker with full control can steal sensitive database information, distribute malware to site visitors, or use the server as a node for further attacks, resulting in severe reputational damage and potential loss of data.

Immediate Action: Immediately deactivate and remove the Premium SEO plugin from all WordPress installations. There is no safe version, as the software is inherently malicious.

Proactive Monitoring: Scan the WordPress database for unauthorized administrator accounts and check web server logs for suspicious remote code execution patterns.

Compensating Controls: Utilize a Web Application Firewall (WAF) to block malicious requests, though removal of the plugin remains the only effective mitigation.

Public Exploit Available: No

This is an extremely severe incident involving a malicious plugin. Organizations must perform an immediate audit of their WordPress installations to identify and purge this plugin. Any site where this plugin was installed should be considered fully compromised and subject to a thorough forensic review and password rotation for all administrative accounts.