I have used the newest version of this plugin with the newest version of the unlimited upload addon on several new installs and each time there is a malware injection.
is something fundamentally wrong with this plugin?
Malware has been detected on your cPanel hosting account with the primary domain HIDDEN and the username HIDDEN.
The following malware files were found:
/home/nusgraor/adamcritchley/wp-content/plugins/all-in-one-wp-migration/lib/view/common/about.php
/home/nusgraor/adamcritchley/wp-content/plugins/all-in-one-wp-migration/lib/view/common/about.php7
/home/nusgraor/adamcritchley/wp-content/plugins/all-in-one-wp-migration/lib/view/common/wp-login.php
/home/nusgraor/adamcritchley/wp-content/plugins/all-in-one-wp-migration/lib/view/common/alfa-rex.php7
/home/nusgraor/adamcritchley/wp-content/plugins/all-in-one-wp-migration/lib/view/common/alfa-rex.php56
/home/nusgraor/adamcritchley/wp-content/plugins/all-in-one-wp-migration/lib/view/common/alfa-rex.php8
/home/nusgraor/adamcritchley/wp-content/plugins/all-in-one-wp-migration/lib/view/common/alfa-rex.php
/home/nusgraor/adamcritchley/wp-content/plugins/all-in-one-wp-migration/lib/view/common/.htaccess
/home/nusgraor/adamcritchley/wp-content/plugins/wp-file-manager/lib/themes/light/about.php
/home/nusgraor/adamcritchley/wp-content/plugins/wp-file-manager/lib/themes/light/about.php7
/home/nusgraor/adamcritchley/wp-content/plugins/wp-file-manager/lib/themes/light/wp-login.php
/home/nusgraor/adamcritchley/wp-content/plugins/wp-file-manager/lib/themes/light/alfa-rex.php7
/home/nusgraor/adamcritchley/wp-content/plugins/wp-file-manager/lib/themes/light/alfa-rex.php56
/home/nusgraor/adamcritchley/wp-content/plugins/wp-file-manager/lib/themes/light/alfa-rex.php8
/home/nusgraor/adamcritchley/wp-content/plugins/wp-file-manager/lib/themes/light/alfa-rex.php
/home/nusgraor/adamcritchley/wp-content/plugins/wp-file-manager/lib/themes/light/.htaccess
/home/nusgraor/adamcritchley/wp-content/plugins/elementor-pro/assets/js/packages/editor-notes/about.php
/home/nusgraor/adamcritchley/wp-content/plugins/elementor-pro/assets/js/packages/editor-notes/about.php7
/home/nusgraor/adamcritchley/wp-content/plugins/elementor-pro/assets/js/packages/editor-notes/wp-login.php
/home/nusgraor/adamcritchley/wp-content/plugins/elementor-pro/assets/js/packages/editor-notes/alfa-rex.php7
Please note that the above is just an excerpt, and in total 27 malware files were detected by the malware scanner.