Buying popular plugins with a large user-base and using it for effortless malicious campaigns have
become a new trend for bad actors.
One such incident happened recently when the renowned developer BestWebSoft sold a popular Captcha WordPress plugin to an undisclosed buyer, who then modified the plugin to download and install a hidden backdoor. Read more http://www.edailynet.com/hidden-backdoor-found-wordpress/