Beware WordPress trojan backdoor hack

Check your WordPress root directory for a file with the following name:

wp-xmpp.php

This is a sneaky trojan backdoor hack that allows hackers to login to a script and carry out a series of commands including compromising files and inserting frame scripts and malware.