Backdoor was planted in 30+ WordPress plugins from Essential Plugin (formerly WP Online Support). If you have any of their plugins installed be sure to patch them and check if your wp-config.php was compromised.
https://t.co/WWaS13T5dg
@karks88 I put most of my thoughts in the thread. I'm a plugin developer living in a don't-run-too-many-plugins world. Core could do a lot more before it would bother me.
Terrible idea... I wonder how much code would be required to get an average WordPress plugin running without WordPress. I mean start with an empty index.php file and a plugin folder. How much of WordPress core code would need reimplemented before it's semi useable.