Rank Math PRO WordPress plugin compromised in supply-chain attack

Malware was injected into Rank Math PRO version 3.0.123 packages distributed between 20:02 UTC on October 15 and 07:12 UTC on October 16, affecting downloads from rankmath.com or updates during that window. The malicious code creates hidden backdoors, and Rank Math advises that any site that installed and activated those copies is compromised.

Why it matters: WordPress administrators must audit and clean affected sites to prevent unauthorized access.

More in Security

Security9h ago3 sources

ConnectWise suspends Cloud Backup service after confirming unauthorized access

The Record + 2 more

Security9h ago2 sources

Ahold Delhaize confirms cyberattack forced US and European grocery systems offline