What part makes no sense? The backdoor in question is "secret", it's "hard-coded" and it's a "backdoor". Saying "secret backdoor" may be redundant, but it still makes sense.
If you look in the document there is a section about a hard-coded backdoor admin account that cannot be changed. So secret hard-coded backdoor does make sense to me.
"Secret hard-coded backdoor" makes sense to me, because the linked webpage illustrates a secret hard-coded backdoor in the product.
Regardless:
> […] Otherwise please use the original title, unless it is misleading or linkbait.
While I'm not a fan of the title it was submitted with, a backdoor is a heck of a lot different than a "normal" vulnerability; to the point where just saying "vulnerability" is a bit misleading.
Perhaps: "WD MyCloud Multiple Vulnerabilities (including hard coded backdoor)"
Nobody is disputing that, so why even bring it up? Whether "secret hardcoded backdoor" is misleading was being discussed.