Hi
I was also hacked through this path, registered an admin account and loaded the plugin as a backdoor.
@biplob018
Which plugin is using the path /wp-json/oxilabtabsultimate/v1/oxi_settings?
Only plugin “Tabs – Responsive Tabs with WooCommerce”?
@hangar1337
Check your server for wp-cache.php file.
This is a loaded backdoor.