<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>pwn.watch: Rank Math incident updates</title>
  <link>https://pwn.watch/t/rank-math</link>
  <description>Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them.</description>
  <language>en</language>
  <lastBuildDate>Fri, 16 Oct 2026 00:00:00 GMT</lastBuildDate>
  <atom:link href="https://pwn.watch/t/rank-math/feed.xml" rel="self" type="application/rss+xml" />
  <item>
    <title>[critical] Rank Math PRO WordPress plugin download backdoored</title>
    <link>https://pwn.watch/i/rank-math-pro-wordpress-backdoor</link>
    <guid isPermaLink="true">https://pwn.watch/i/rank-math-pro-wordpress-backdoor</guid>
    <pubDate>Fri, 16 Oct 2026 00:00:00 GMT</pubDate>
    <category>critical</category>
    <description>&lt;p&gt;SEO plugin vendor Rank Math confirmed attackers tampered with PRO version 3.0.123 on the official download site, planting hidden backdoors during an ~11-hour window. Sites that installed that build should audit and rebuild.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Status:&lt;/strong&gt; closed · &lt;strong&gt;Patch:&lt;/strong&gt; patched · &lt;strong&gt;Fixed in:&lt;/strong&gt; Clean PRO builds after incident&lt;/p&gt;</description>
  </item>
</channel>
</rss>
