Unauthorised Plugin "DoLogin Security" seems to be able to install itself

[webformation]

​https://wordpress.org/support/topic/why-has-this-plugin-suddenly-appeared-on-one-of-our-websites/#post-13400138

I have this issue where a plugin mysteriously installed itself. Seems unthinkable but found others on the support forum for this plugin reported the same.

How is this even possible?
Thanks

[webformation]

Update: Found there was a reference to the plugin being installed and activated together with the latest Litespeed Cache plugin without advance notification or permission from admins. Seems a breach of user agreement with plugin developer.

[TimothyBlynJacobs]

Hi @webformation,

Welcome to WordPress Trac! Trac is used for tracking issues with the WordPress Core software.

If you have a concern about a plugin potentially violating the WordPress.org plugin guidelines, you can report it by contacting the plugin team via email plugins@wordpress.org.