I just installed your plugin on my site, justaskweg.com, as it was infected with the subject code. You seem to have cleaned it, and I’ll make a donation. However, MLS reported potential threats in four files:
…/html/wp-includes/js/tinymce/tiny_mce_popup.js
…/html/wp-content/plugins/updraftplus/includes/PEAR/PEAR.php
…/html/wp-content/plugins/wp-video-posts/inc/video-js/video.dev.js
…/html/wp-content/plugins/wp-video-posts/inc/video-js/video.js
I don’t know very much about the code in each file, but I’m hesitant to whitelist them if there may be an issue. The plugins are from reputable producers. Thanks!
Those files show up in the potential threats because they use the eval function but they should be ok to whitelist. Just make sure that it’s only a simple eval statement that it highlighted in those files before you whitelist.