I never installed this plug-in but it seems some hacker is persistently injecting something enabling admin access, adding WPCode plug-in, and then including a malicious script. I’ve taken all the usual security measures but they keep getting back in. I’m not sure it’s an issue with WPCode specifically.
