Trojanized Admin Menu Editor Pro PHP Web Shell Drop

Ibrahim Saud@tektrix

•updated Sep 16, 2026•1•0•2

Detects the presence of PHP web shell code within the Admin Menu Editor Pro WordPress plugin directory. This rule targets indicators of a supply chain compromise where a legitimate plugin update is backdoored to include malicious PHP code designed for remote command execution via HTTP requests.