criticalclosedpatched
Rank Math PRO WordPress plugin download backdoored
› Rank Math PRO (WordPress)
Get an email when a new major security incident drops. No spam, unsubscribe any time.
- started
- Oct 15, 2026
- closed
- Oct 16, 2026
- CVEs
- none
- sources
- 1
## summary
SEO plugin vendor Rank Math confirmed attackers tampered with PRO version 3.0.123 on the official download site, planting hidden backdoors during an ~11-hour window. Sites that installed that build should audit and rebuild.
severity: Critical WordPress supply-chain
## affected
- 3.0.123 (compromised download window)
## fixed in
- Clean PRO builds after incident
## news & write-ups[1]
## notes & caveats
Verify primary vendor advisory for exact fixed versions; facts taken from public sources listed in links.
