@johannesweiss @nicklockwood Not a script bug, this was a user (w/ a great nickname bad123bb123 later renamed themselves to Admin, which is the nickname that emails show) that previously tried to upload simple-backdoor.php on different issues, history still available here https://t.co/sgDgfxJUJ7