apparent roguery in an Automattic WordPress plug-in

My site,?testedtechnology.co.uk, became admin-inaccessible yesterday afternoon. I received the very helpful and much appreciated email from WordPress drawing my attention to this, pinpointing the problem with a detailed error report and offering me a temporary backdoor into the site.

I checked in and immediately deactivated the?plugin causing the problem. I’m aware that there have been some dodgy plugins floating around. The puzzle here is that this plugin, Advanced Editor Tools, comes from Automattic.

This is the error report I received:

WordPress version 6.2
Active theme: Parabola (version 2.4.0.1)
Current plugin: Advanced Editor Tools (version 5.9.0)
PHP version 7.4.33

Error Details
=============
An error of type E_ERROR was caused in line 592 of the file /home/davidfanning/public_html/wp-content/plugins/tinymce-advanced/tinymce-advanced.php. Error message: Uncaught ArgumentCountError: Too few arguments to function Advanced_Editor_Tools::mce_buttons_1(), 1 passed in /home/davidfanning/public_html/wp-includes/class-wp-hook.php on line 308 and exactly 2 expected in /home/davidfanning/public_html/wp-content/plugins/tinymce-advanced/tinymce-advanced.php:592
Stack trace:
#0 /home/davidfanning/public_html/wp-includes/class-wp-hook.php(308): Advanced_Editor_Tools->mce_buttons_1(Array)
#1 /home/davidfanning/public_html/wp-includes/plugin.php(205): WP_Hook->apply_filters(Array, Array)
#2 /home/davidfanning/public_html/wp-content/plugins/mrw-web-design-simple-tinymce/inc/block-editor.php(211): apply_filters(‘mce_buttons’, Array)
#3 /home/davidfanning/public_html/wp-content/plugins/mrw-web-design-simple-tinymce/inc/block-editor.php(476): mrw_hidden_blocks()
#4 /home/davidfanning/public_html/wp-content/plugins/mrw-web-design-simple-tinymce/inc/block-editor.php(526): mrw_block_editor_js_config()
#5 /home/davidfanning/public_html/wp-includes/class-wp-hook.php(308): mrw_block_

I’ve also had active another plugin with a similar function set: Advanced TinyMCE Configuration from Andrew Ozz. Could there be a conflict there?

Looking forward to suggestions from the forum.

—

Chris