Quick Answer
A WordPress backdoor is hidden persistence that lets an attacker regain access after the visible malware or vulnerable plugin is cleaned. Safe removal starts with containment and backups, then file comparison, database review, credential rotation, clean reinstalls and monitoring. Do not rush into deleting files before ...