WordPress plugin hijacked in 2020 hid a dormant backdoor for years
anchor.host