From a 7 KB file to a 13-year backdoor operation

Someone bought 30 WordPress plugins and planted a backdoor in all of them

GoDaddy gave a domain to a stranger without any documentation