Wordpress has always been a backdoor with and without plugins.