Admin Menu Editor Pro shipped a backdoor. How to tell whether your site took it.

An attacker reached the vendor's update server and two builds went out with a web shell in them. The files, the directory and the database rows to look for, why the version number cannot clear you, and what to do if you find one.