SignalPost

← Stories

Rank Math PRO WordPress Plugin Compromised by Malware in Supply Chain Attack

Copies of Rank Math PRO version 3.0.123 downloaded or updated between October 15 and 16, 2026 were found to contain a backdoor, so sites that installed them should be treated as compromised.

3newsrooms
3articles
6 hoursrunning
Oct 19first seen

Ask Scout

Scout answers questions about this story using only the coverage below.

Coverage over time

Oct 19 8 AM: 1 articleOct 19 9 AM: 1 articleOct 19 2 PM: 1 articleOct 19 8 AMOct 19 2 PMpeak 1 per hour

Articles

Oct 19, 2:24 PM bleepingcomputer.com WordPress SEO plugin Rank Math compromised to backdoor websites
Oct 19, 9:28 AM thehackernews.com Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor
Oct 19, 8:20 AM securityweek.com Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack