Rank Math Seo Pro
Monthly
Supply-chain malware in Rank Math SEO PRO 3.0.123 packages downloaded or updated between October 15, 2026 at 20:02 UTC and October 16, 2026 at 07:12 UTC can compromise WordPress sites that activated the affected plugin, exposing credentials and enabling persistent backdoor access. The vendor-confirmed incident is limited to that roughly 11-hour distribution window and requires plugin activation; running version 3.0.123 obtained outside the window is not sufficient to establish compromise. Rank Math released version 3.0.124 as the clean replacement, and no public exploit was identified at time of analysis in the provided data.
Supply-chain malware in Rank Math SEO PRO 3.0.123 packages downloaded or updated between October 15, 2026 at 20:02 UTC and October 16, 2026 at 07:12 UTC can compromise WordPress sites that activated the affected plugin, exposing credentials and enabling persistent backdoor access. The vendor-confirmed incident is limited to that roughly 11-hour distribution window and requires plugin activation; running version 3.0.123 obtained outside the window is not sufficient to establish compromise. Rank Math released version 3.0.124 as the clean replacement, and no public exploit was identified at time of analysis in the provided data.