mplugin.php is a hidden script written by aerin Singh, it execute ads on your site without your permission and steal your credentials . so beware of this hidden script. just delete this script on plugin folder using ftp or online file manager. Also find the plugin (real culprit) that used to inject this hidden script (or plugin). This happens when you use cracked plugin or premium nulled plugins (rarely can be found in free plugin also).
