A key WordPress feature has been hijacked to show malicious code, spam images

Researchers found different malware hiding in an essential WordPress directory.