Attackers have hijacked the code behind several popular WordPress plugins to plant hidden backdoors and rogue administrator ...