Hidden admin powers, a fake Cloudflare redirect and a backdoor, removed by Guardian
- Challenge
- Customer accounts had been given administrator powers in secret, a script sent visitors to a fake Cloudflare check page, and a backdoor was hidden in a theme file.
- Result
- All three threats removed automatically. The backdoor, planted in November 2025, was found and removed on 9 September 2026 during a regular scan.

