Nulled/pirated plugin with a hidden backdoor

What it is

This plugin or theme is an unofficial ("nulled") copy of a paid product, altered to include a backdoor that gives an attacker remote access to the site — even while the plugin itself appears to work normally.

How to fix it

Remove it and install the official, licensed version instead. A nulled copy never receives security updates, so the backdoor — and any future vulnerability — stays open indefinitely.